COOEY // HUBcompliance · community · intelligence

Exposures › CVE-2024-21351

CVE-2024-21351

Severity
high · on CISA KEV actively exploited
Source
CISA-KEV · kev
Published
2024-02-13
Reference
https://nvd.nist.gov/vuln/detail/CVE-2024-21351
⚡ RCE ⌖ exploited in the wild shame 65/100 rceexploited-in-wild

Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience and inject code to potentially gain code execution, which could lead to some data exposure, lack of system availability, or both.

Players implicated

Microsoft · vendorwindows · product

Description

Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience and inject code to potentially gain code execution, which could lead to some data exposure, lack of system availability, or both.

Affected FedRAMP products 4 in the catalog

ProductProviderStatusMatch
Azure Commercial Cloud Microsoft Authorized vendor-exact · 0.90
Azure Government (includes Dynamics 365) Microsoft Authorized vendor-exact · 0.90
Microsoft Office 365 GCC High Microsoft In Process vendor-exact · 0.90
Office 365 Multi-Tenant & Supporting Services Microsoft Authorized vendor-exact · 0.90