CVE-2022-44698

A bypass vulnerability in Microsoft Defender SmartScreen allowed attackers to evade Mark of the Web protections via a crafted malicious file.

An attacker could bypass the Mark of the Web (MOTW) defense in Microsoft Defender SmartScreen by using a specially crafted malicious file, allowing malware to execute despite MOTW protections. This is a critical, actively exploited vulnerability linked to ransomware campaigns, meaning DIB organizations must ensure their Defender SmartScreen is patched and consider supplemental file-execution controls. The failure is avoidable through timely patching and highlights reliance on a single vendor's security posture.

Shame score — A critical, actively exploited bypass vulnerability in a core endpoint security product linked to ransomware, demonstrating severe negligence in patching and reliance on a single vendor.