Main Vulnerability Database Vulnerabilities #VU73507

Security features bypass in Microsoft Windows and Windows Server - CVE-2023-24880

Published: March 14, 2023

Vulnerability identifier: #VU73507

CSH Severity: High

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-24880

CWE-ID: CWE-254

Exploitation vector: Remote access

Exploit availability: The vulnerability is being exploited in the wild

Vulnerability details

The vulnerability allows a remote attacker to bypass implemented security restrictions.

The vulnerability exists due to incorrect implementation of the Windows SmartScreen Security Feature. A remote attacker can trick the victim to open a specially crafted file and bypass the Mark of the Web (MOTW) defenses.

Note, the vulnerability is being actively exploited in the wild.

Affected software

Microsoft Windows
Windows Server

How to mitigate CVE-2023-24880

Install updates from vendor's website.

External References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24880

Related Security Bulletins