NetSight
medium5.4Known exploited

CVE-2022-44698

Microsoft Defender SmartScreen Security Feature Bypass Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-12-13. Federal due date: 2023-01-03.

Apply updates per vendor instructions.

Impact

Windows SmartScreen Security Feature Bypass Vulnerability

Affected products

VendorProductAffected versions
MicrosoftWindows 10 1607
before 10.0.14393.5582
MicrosoftWindows 10 1809
before 10.0.17763.3770
MicrosoftWindows 10 20h2
before 10.0.19042.2364
MicrosoftWindows 10 21h1
before 10.0.19043.2364
MicrosoftWindows 10 21h2
before 10.0.19044.2364
MicrosoftWindows 10 22h2
before 10.0.19045.2364
MicrosoftWindows 11 21h2
before 10.0.22000.1335
MicrosoftWindows Server 2016
before 10.0.14393.5582
MicrosoftWindows Server 2019
before 10.0.17763.3770
MicrosoftWindows Server 2022
before 10.0.20348.1366

References