CISA Known Exploited Vulnerability
This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.
Remediation Deadline: Mar 5, 2024
Description
Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience and inject code to potentially gain code execution, which could lead to some data exposure, lack of system availability, or both.
EPSS — Exploit Probability
10.8%
Higher than 93.2% of all CVEs
Required Action
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-21351; https://nvd.nist.gov/vuln/detail/CVE-2024-21351
Risk Assessment
ELEVATEDIn CISA KEV
Details
- Severity
- High
- EPSS
- 10.8%
- CISA KEV
- Yes
- Ransomware
- Unknown
- Articles
- 0
Timeline
Published
Feb 13, 2024
Added to KEV
Feb 13, 2024
Remediation Due
Mar 5, 2024