CVEvulnerability

CVE-2024-21351

7.6 HIGH Known exploited Published 2024-02-13 Modified 2026-08-10 Official page ↗

CISA Known Exploited Vulnerability

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability — Microsoft Windows

Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience and inject code to potentially gain code execution, which could lead to some data exposure, lack of system availability, or both.

Added to KEV
2024-02-13
Remediation due
2024-03-05
Ransomware use
Unknown
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notes
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-21351; https://nvd.nist.gov/vuln/detail/CVE-2024-21351
Status
Analyzed
Published
2024-02-13
Last modified
2026-08-10
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.6 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L
Weaknesses
CWE-94

Description

Windows SmartScreen Security Feature Bypass Vulnerability

Affected configurations

• microsoft windows 10 1507 (< 10.0.10240.20469) • microsoft windows 10 1607 (< 10.0.14393.6709) • microsoft windows 10 1809 (< 10.0.17763.5458) • microsoft windows 10 21h2 (< 10.0.19044.4046) • microsoft windows 10 22h2 (< 10.0.19045.4046) • microsoft windows 11 21h2 (< 10.0.22000.2777) • microsoft windows 11 22h2 (< 10.0.22621.3155) • microsoft windows 11 23h2 (< 10.0.22631.3155) • microsoft windows server 2016 • microsoft windows server 2019 (< 10.0.17763.5458) • microsoft windows server 2022 (< 10.0.20348.2322) • microsoft windows server 2022 23h2 (< 10.0.25398.709)

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References