Exploit / PoCcriticalExploited in the wild

CISA adds Microsoft Windows bugs to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairsFeb 15, 2024 · 10:04 UTC (Feb 15, 2024)2 min read1

Read at securityaffairs.com

Analyze CVE-2024-21412 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2024-21412 CVE-2024-21351 CVE-2023-36025

Tags: cve-2024-21412 cve-2024-21351 cve-2023-36025 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-36025	Windows SmartScreen Bypass (CVE-2023-36025) Exploited via Crafted Shortcut Files	8.8	88%	KEV	Nov 14, 2023 KEV Nov 14, 2023
CVE-2024-21412 +1 related CVE CVE-2024-21351	CVE-2024-21412: Security Feature Bypass in Microsoft Windows Internet Shortcut Files	8.1 group max	99%	KEVRansomware	Feb 13, 2024 KEV Feb 13, 2024

From the original article

2 min read at securityaffairs.com

U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds 2 Microsoft Windows flaws to its Known Exploited Vulnerabilities catalog.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.