CVE-2024-29988

SmartScreen Prompt Security Feature Bypass Vulnerability

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29988	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:microsoft:windows_10_1809:::::::x64:*
	cpe:2.3:o:microsoft:windows_10_21h2::::::::
	cpe:2.3:o:microsoft:windows_10_22h2::::::::
	cpe:2.3:o:microsoft:windows_11_23h2::::::::
	cpe:2.3:o:microsoft:windows_server_2019::::::::
	cpe:2.3:o:microsoft:windows_server_2022::::::::
	cpe:2.3:o:microsoft:windows_server_2022_23h2::::::::

History

03 May 2024, 16:13

Type	Values Removed	Values Added
References	~~() https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29988 -~~	() https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29988 - Patch, Vendor Advisory
CPE		cpe:2.3:o:microsoft:windows_server_2022_23h2:::::::: cpe:2.3:o:microsoft:windows_10_22h2:::::::: cpe:2.3:o:microsoft:windows_10_1809:::::::x64:* cpe:2.3:o:microsoft:windows_10_21h2:::::::: cpe:2.3:o:microsoft:windows_server_2022:::::::: cpe:2.3:o:microsoft:windows_server_2019:::::::: cpe:2.3:o:microsoft:windows_11_23h2::::::::
First Time		Microsoft windows 10 22h2 Microsoft windows 11 23h2 Microsoft windows Server 2019 Microsoft windows 10 1809 Microsoft windows Server 2022 Microsoft windows 10 21h2 Microsoft windows Server 2022 23h2 Microsoft
CWE		NVD-CWE-noinfo

01 May 2024, 01:00

Type	Values Removed	Values Added
Summary		(es) Vulnerabilidad de omisión de la función de seguridad de solicitud de SmartScreen

09 Apr 2024, 17:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-04-09 17:16

Updated : 2024-05-03 16:13

NVD link : CVE-2024-29988

Mitre link : CVE-2024-29988

CVE.ORG link : CVE-2024-29988

JSON object : View

Products Affected

microsoft

windows_11_23h2
windows_server_2019
windows_10_22h2
windows_server_2022_23h2
windows_10_21h2
windows_10_1809
windows_server_2022

CWE

NVD-CWE-noinfo CWE-693

Protection Mechanism Failure

{"id": "CVE-2024-29988", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "secure@microsoft.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2024-04-09T17:16:01.830", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29988", "tags": ["Patch", "Vendor Advisory"], "source": "secure@microsoft.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "secure@microsoft.com", "description": [{"lang": "en", "value": "CWE-693"}]}], "descriptions": [{"lang": "en", "value": "SmartScreen Prompt Security Feature Bypass Vulnerability"}, {"lang": "es", "value": "Vulnerabilidad de omisi\u00f3n de la funci\u00f3n de seguridad de solicitud de SmartScreen"}], "lastModified": "2024-05-03T16:13:41.277", "cisaActionDue": "2024-05-21", "cisaExploitAdd": "2024-04-30", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "7400FF15-17AF-402C-9FEB-BFBCEB49F6FB", "versionEndExcluding": "10.0.17763.5696"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7B8BF71-D89F-4CC0-BEFA-4E1988171F3A", "versionEndExcluding": "10.0.22000.2899"}, {"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C03FA6B4-F1CC-49E5-B936-15F6720092F0", "versionEndExcluding": "10.0.22621.3447"}, {"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "79409538-C0CE-4051-80C3-383220427D0B", "versionEndExcluding": "10.0.22631.3447"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4EAAB276-D0E4-41CA-8A25-4DE9FC90543E", "versionEndExcluding": "10.0.17763.5696"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7103C832-A4FB-4373-8A93-291E7A89B4AA", "versionEndExcluding": "10.0.20348.2402"}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F2B61B79-FEE5-4041-918D-6FE2C92771DC", "versionEndExcluding": "10.0.25398.830"}], "operator": "OR"}]}], "sourceIdentifier": "secure@microsoft.com", "cisaRequiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "cisaVulnerabilityName": "Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability"}