Security features bypass in Microsoft Windows and Windows Server - CVE-2024-21351

Vulnerability details

The vulnerability allows a remote attacker to bypass implemented security restrictions.

The vulnerability exists due to improper input validation when handling files downloaded from the Internet. A remote attacker can bypass the SmartScreen protection feature and trick the victim into launching a malicious files on the system.

Note, the vulnerability is being actively exploited in the wild.

Affected software

How to mitigate CVE-2024-21351

External References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2024-21351

Related Security Bulletins

• Security restrictions bypass in Microsoft Windows SmartScreen