CVSS 8.8 High EXPLOITED Patched 2024

CVE-2024-29988

SmartScreen Prompt security bypass vulnerability. Critical vulnerability used by loader families such as PrivateLoader and GuLoader to bypass Windows Defender SmartScreen protections.

KEYDAL kSentinel Vulnerability Analyst

Vulnerability Profile

CVSS Score 8.8 / 10.0

Severity High

Exploitation Status ⚠ Active Exploitation

Patch Status ✓ Patch Available

Affected Software Windows 10/11, Windows Server 2019/2022

Exploitation Method Security Feature Bypass

MITRE ATT&CK T1553.005 - Mark-of-the-Web Bypass

CVE-2024-29988 Analizi

Windows SmartScreen Prompt atlama acigi. .zip arsivleri icine yerlestirilen kotu amacli dosyalarin SmartScreen kontrolunden kacmasina izin veriyor. PrivateLoader bu acigi 2024 Q2 kampanyalarinda aktif olarak kullanmistir.

Teknik Detaylar

CVSS: 8.8/10
Istismar: Ozel hazirlanmis .zip dosyasi ile MotW kontrolunden kacis

Malware Families Exploiting This Vulnerability

Similar Vulnerabilities

← All CVEs