CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Apr 4, 2023

CVE-2023-24880

High

EPSS 77.3%CISA KEVRansomware

Description

Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file.

EPSS — Exploit Probability

77.3%

Higher than 99.0% of all CVEs

Required Action

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-24880; https://nvd.nist.gov/vuln/detail/CVE-2023-24880

Risk Assessment

CRITICAL

In CISA KEV

High EPSS

Ransomware

Details

Severity: High
EPSS: 77.3%
CISA KEV: Yes
Ransomware: Known
Articles: 0

Timeline

Published

Mar 14, 2023

Added to KEV

Mar 14, 2023

Remediation Due

Apr 4, 2023

Affected Product

Microsoft

Windows

View all Microsoft CVEs

External Links

NVD (NIST)CVE Details MITRE CVE