Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2022-44698
HistoryDec 13, 2022 - 7:15 p.m.

CVE-2022-44698

2022-12-1319:15:14
CWE-755
[email protected]
web.nvd.nist.gov
11
windows smartscreen
security bypass
vulnerability

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

EPSS

0.029

Percentile

91.0%

JSON

Windows SmartScreen Security Feature Bypass Vulnerability

Affected configurations

Nvd
Node
microsoftwindows_10_1607Range<10.0.14393.5582
OR
microsoftwindows_10_1809Range<10.0.17763.3770
OR
microsoftwindows_10_20h2Range<10.0.19042.2364
OR
microsoftwindows_10_21h1Range<10.0.19043.2364
OR
microsoftwindows_10_21h2Range<10.0.19044.2364
OR
microsoftwindows_10_22h2Range<10.0.19045.2364
OR
microsoftwindows_11_21h2Range<10.0.22000.1335
OR
microsoftwindows_server_2016Range<10.0.14393.5582
OR
microsoftwindows_server_2019Range<10.0.17763.3770
OR
microsoftwindows_server_2022Range<10.0.20348.1366
VendorProductVersionCPE
microsoftwindows_10_1607*cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*
microsoftwindows_10_1809*cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*
microsoftwindows_10_20h2*cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*
microsoftwindows_10_21h1*cpe:2.3:o:microsoft:windows_10_21h1:*:*:*:*:*:*:*:*
microsoftwindows_10_21h2*cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*
microsoftwindows_10_22h2*cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*
microsoftwindows_11_21h2*cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*
microsoftwindows_server_2016*cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
microsoftwindows_server_2019*cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
microsoftwindows_server_2022*cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*

Related

mscve 1
cisa_kev 1
attackerkb 1
prion 1
cvelist 1
cve 1
vulnrichment 1
hivepro 2
krebs 2
malwarebytes 1
qualysblog 2
trellix 2
thn 3
avleonov 1
mskb 5
openvas 3
nessus 5
kaspersky 1
rapid7blog 1
mscve
mscve
Windows SmartScreen Security Feature Bypass Vulnerability
2022-12-13 08:00:00
cisa_kev
cisa_kev
Microsoft Defender SmartScreen Security Feature Bypass Vulnerability
2022-12-13 00:00:00
attackerkb
attackerkb
CVE-2022-44698
2022-12-13 00:00:00
prion
prion
Security feature bypass
2022-12-13 19:15:00
cvelist
cvelist
CVE-2022-44698 Windows SmartScreen Security Feature Bypass Vulnerability
2022-12-13 00:00:00
cve
cve
CVE-2022-44698
2022-12-13 19:15:14
vulnrichment
vulnrichment
CVE-2022-44698 Windows SmartScreen Security Feature Bypass Vulnerability
2022-12-13 00:00:00
hivepro
hivepro
Microsoft addresses actively exploited zero-day and numerous critical flaws
2022-12-15 11:42:15
Citrix ADC and Gateway Zero-Day Vulnerability Exploited by APT5
2022-12-15 13:53:41
krebs
krebs
Microsoft Patch Tuesday, December 2022 Edition
2022-12-14 17:01:07
Fat Patch Tuesday, February 2024 Edition
2024-02-13 22:28:48
malwarebytes
malwarebytes
Update now! Two zero-days fixed in 2022's last patch Tuesday
2022-12-14 15:00:00
qualysblog
qualysblog
Qualys Threat Research Unit: Threat Thursdays, December 2022
2022-12-29 19:05:19
The December 2022 Patch Tuesday Security Update Review
2022-12-13 23:17:17
trellix
trellix
The Bug Report - March 2023 Edition
2023-04-05 00:00:00
The Bug Report - March 2023 Edition
2023-04-05 00:00:00
thn
thn
December 2022 Patch Tuesday: Get Latest Security Updates from Microsoft and More
2022-12-14 07:53:00
Alert: Microsoft Releases Patch Updates for 5 New Zero-Day Vulnerabilities
2023-11-15 05:46:00
Microsoft Rolls Out Patches for 80 New Security Flaws — Two Under Active Attack
2023-03-15 05:26:00
avleonov
avleonov
Microsoft Patch Tuesday December 2022: SPNEGO RCE, Mark of the Web Bypass, Edge Memory Corruptions
2022-12-24 22:55:39
mskb
mskb
December 13, 2022—KB5021235 (OS Build 14393.5582)
2022-12-13 08:00:00
December 13, 2022—KB5021234 (OS Build 22000.1335)
2022-12-13 08:00:00
December 13, 2022—KB5021249 (OS Build 20348.1366)
2022-12-13 08:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB5021235)
2022-12-14 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5021237)
2022-12-14 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5021233)
2022-12-14 00:00:00
nessus
nessus
KB5021235: Windows 10 Version 1607 and Windows Server 2016 Security Update (December 2022)
2022-12-13 00:00:00
KB5021234: Windows 11 Security Update (December 2022)
2022-12-13 00:00:00
KB5021249: Windows Server 2022 Security Update (December 2022)
2022-12-13 00:00:00
kaspersky
kaspersky
KLA20117 Multiple vulnerabilities in Microsoft Windows
2022-12-13 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - December 2022
2022-12-13 21:24:06

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

EPSS

0.029

Percentile

91.0%

JSON
Related for NVD:CVE-2022-44698
mscve1cisa_kev1attackerkb1prion1cvelist1cve1vulnrichment1hivepro2krebs2malwarebytes1qualysblog2trellix2thn3avleonov1mskb5openvas3nessus5kaspersky1rapid7blog1