Lucene search

K
cisa_kevCISACISA-KEV-CVE-2024-21412
HistoryFeb 13, 2024 - 12:00 a.m.

Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability

2024-02-1300:00:00
CISA
www.cisa.gov
33
microsoft windows
internet shortcut files
security feature bypass

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

AI Score

7.2

Confidence

Low

EPSS

0.003

Percentile

69.7%

Microsoft Windows Internet Shortcut Files contains an unspecified vulnerability that allows for a security feature bypass.

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

AI Score

7.2

Confidence

Low

EPSS

0.003

Percentile

69.7%