Описание
Windows SmartScreen Security Feature Bypass Vulnerability
Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.
FAQ
How could an attacker exploit this vulnerability?
An attacker could convince a user to install an application from a specially crafted link. Successful exploitation could bypass SmartScreen's source reputation checks and allow the application to proceed with installation.
Обновления
| Продукт | Статья | Обновление |
|---|---|---|
| Windows 11 Version 24H2 for ARM64-based Systems | ||
| Windows 11 Version 24H2 for x64-based Systems | ||
| Windows 11 Version 25H2 for ARM64-based Systems | ||
| Windows 11 Version 25H2 for x64-based Systems | ||
| Windows 11 version 26H1 for x64-based Systems | ||
| Windows 11 Version 26H1 for ARM64-based Systems | ||
| Windows 11 Version 26H2 for ARM64-based Systems | ||
| Windows 11 Version 26H2 for x64-based Systems |
Показывать по
Возможность эксплуатации
Publicly Disclosed
Exploited
Latest Software Release
EPSS
8.8 High
CVSS3
Связанные уязвимости
Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.
Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.
EPSS
8.8 High
CVSS3