Medium · published November 10, 2022
CVSS calls it medium at 5.4. It is confirmed in active exploitation. It sits in the 79.6th percentile for exploit probability.
⚠️ A crafty bypass lets attackers sidestep Windows' security warnings — think of it as a pizza delivery that skips the doorbell and sneaks right inside! 🍕 Imagine your home has a security system that fails to alert you when someone walks in through the back door without knocking. This vulnerability is like that sneaky visitor bypassing all your precautions, leaving you exposed! An attacker could exploit this bypass to run untrusted files without raising alarms, putting your system at risk of malware or data leaks. While it's not catastrophic, the potential for malicious activity is definitely a concern!
Imagine your home has a security system that fails to alert you when someone walks in through the back door without knocking. This vulnerability is like that sneaky visitor bypassing all your precautions, leaving you exposed! This vulnerability allows an attacker to bypass the Mark of the Web feature, which is designed to warn users about files downloaded from the internet. This could let harmful content execute without the usual security prompts.
An attacker could exploit this bypass to run untrusted files without raising alarms, putting your system at risk of malware or data leaks. While it's not catastrophic, the potential for malicious activity is definitely a concern! To protect your system, ensure you're running the latest Windows updates that address this vulnerability. Also, audit your file handling policies to ensure extra layers of checks are in place. Don't let those sneaky deliveries surprise you! This is manageable! Stay proactive, keep your systems updated, and you’ll keep those uninvited guests at bay. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/windows_10_1507 | < 10.0.10240.19567 | 10.0.10240.19567 |
| microsoft/windows_10_1607 | < 10.0.14393.5501 | 10.0.14393.5501 |
| microsoft/windows_10_1809 | < 10.0.17763.3650 | 10.0.17763.3650 |
| microsoft/windows_10_20h2 | < 10.0.19042.2251 | 10.0.19042.2251 |
| microsoft/windows_10_21h1 | < 10.0.19043.2251 | 10.0.19043.2251 |
| microsoft/windows_10_21h2 | < 10.0.19044.2251 | 10.0.19044.2251 |
| microsoft/windows_10_22h2 | < 10.0.19045.2251 | 10.0.19045.2251 |
| microsoft/windows_11_21h2 | < 10.0.22000.1219 | 10.0.22000.1219 |
| microsoft/windows_11_22h2 | < 10.0.22621.819 | 10.0.22621.819 |
| microsoft/windows_server_2016 | < 10.0.14393.5501 | 10.0.14393.5501 |
| microsoft/windows_server_2019 | < 10.0.17763.3650 | 10.0.17763.3650 |
| microsoft/windows_server_2022 | < 10.0.20348.1249 | 10.0.20348.1249 |