vsociety

CVEs

CVE-2024-29988

8.8 High Severity

xtranslation

The vulnerability CVE-2024-29988 is a bypass vulnerability of the SmartScreen Prompt security feature. An attacker could exploit this vulnerability by tricking a user into launching malicious files using a launcher application that requests that no user interface be displayed. The attacker could send the user a specially crafted file to trigger the remote code execution issue. Although it has not been officially confirmed by Microsoft, this flaw has been observed being actively exploited in the wild. It is important to exercise caution and consider this vulnerability to be in the wild until Microsoft clarifies its situation.

@aduran

4 posts

Total vcoins

Comments (0)