Security features bypass in Microsoft Malware Protection Engine and Windows Defender - CVE-2023-24934

Vulnerability details

The vulnerability allows a remote attacker to bypass malware detection mechanism.

The vulnerability exists due to an unspecified error in Microsoft malware protection engine. A remote attacker can trick the victim to download a malicious file that bypasses the Windows Defender detection.

Affected software

How to mitigate CVE-2023-24934

External References

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24934

Related Security Bulletins

• Security restrictions bypass in Microsoft Defender