CVE-2022-44698KEV · OVERDUE

Windows SmartScreen Security Feature Bypass Vulnerability

Medium · published December 13, 2022

Patch now

The score understates this — it's already being exploited

CVSS calls it medium at 5.4. It is confirmed in active exploitation. It sits in the 99.5th percentile for exploit probability.

1390
days past CISA
deadline
CVSS v3.1
5.4
EPSS
76%
Percentile
99.5
In the wild
Confirmed
What it is

⚠️ A minor twist in Windows SmartScreen can let attackers bypass its defenses! Just like a dinner guest sneaking into the kitchen by way of a poorly placed curtain. 🔍 Think of SmartScreen as a vigilant restaurant host, checking IDs at the door. If a guest cleverly uses the hidden side door, they can slip past the scrutiny and access sensitive areas — that’s the risk here! An attacker exploiting this vulnerability could bypass important security checks, potentially leading to malicious software running freely on your system. This isn't a full-blown breach, but it opens the door to further attacks and compromises, making it a sneaky threat to your system's integrity.

Put simply

Think of SmartScreen as a vigilant restaurant host, checking IDs at the door. If a guest cleverly uses the hidden side door, they can slip past the scrutiny and access sensitive areas — that’s the risk here! The Windows SmartScreen feature can be bypassed due to improper verification in certain interactions, which allows untrusted applications to run without triggering security warnings — like a fraudulent ID getting someone inside a venue.

What to do

An attacker exploiting this vulnerability could bypass important security checks, potentially leading to malicious software running freely on your system. This isn't a full-blown breach, but it opens the door to further attacks and compromises, making it a sneaky threat to your system's integrity. To address this, ensure that your Windows operating system is updated to the latest version that patches this vulnerability. Regularly review your security settings to ensure SmartScreen is enabled and actively monitoring — think of it as keeping the restaurant host on high alert! You've got this! Follow these steps and keep your system secure. 🛡️

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:F/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.76267 · 99.5th percentile
Published
2022-12-13T00:00Z
KEV added
2022-12-13 · due 2023-01-03
EPSS history
Timeline
  • 13 DEC 00:00Z
    Added to CISA KEV — remediate by Jan 3
    kev
  • 13 DEC 00:00Z
    Windows SmartScreen Security Feature Bypass Vulnerability
    cvelistv5