CVE-2024-29988

SmartScreen Prompt guvenlik atlama acigi. PrivateLoader ve GuLoader gibi loader ailelerinin Windows Defender SmartScreen korumalarini atlatmak icin kullandigi kritik acik.

KEYDAL kSentinel Vulnerability Analyst

Vulnerability Profile

CVSS Score 8.8 / 10.0

Severity Yüksek

Exploitation Status ⚠ Active Exploitation

Patch Status ✓ Patch Available

Affected Software Windows 10/11, Windows Server 2019/2022

Exploitation Method Security Feature Bypass

MITRE ATT&CK T1553.005 - Mark-of-the-Web Bypass

CVE-2024-29988 Analizi

Windows SmartScreen Prompt atlama acigi. .zip arsivleri icine yerlestirilen kotu amacli dosyalarin SmartScreen kontrolunden kacmasina izin veriyor. PrivateLoader bu acigi 2024 Q2 kampanyalarinda aktif olarak kullanmistir.

Teknik Detaylar

CVSS: 8.8/10
Istismar: Ozel hazirlanmis .zip dosyasi ile MotW kontrolunden kacis

Malware Families Exploiting This Vulnerability

Similar Vulnerabilities

← All CVEs