CVE-2024-29988: Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability

Published Apr 9, 2024
·
Updated

Microsoft SmartScreen Prompt contains a security feature bypass vulnerability that allows an attacker to bypass the Mark of the Web (MotW) feature. This vulnerability can be chained with CVE-2023-38831 and CVE-2024-21412 to execute a malicious file.

Other sources

SmartScreen Prompt Security Feature Bypass Vulnerability

— Microsoft

Affected Software

32 affected componentsFixes available
Microsoft SmartScreen Prompt
Microsoft Windows 10 1809<10.0.17763.5696
Microsoft Windows 10 1809<10.0.17763.5696
Microsoft Windows 10 1809<10.0.17763.5696
Microsoft Windows 10 21h2<10.0.19044.4291
Microsoft Windows 10 22h2<10.0.19045.4291
Microsoft Windows 11 21h2<10.0.22000.2899
Microsoft Windows 11 22h2<10.0.22621.3447
Microsoft Windows 11 23h2<10.0.22631.3447
Microsoft Windows Server 2019<10.0.17763.5696
Microsoft Windows Server 2022<10.0.20348.2402
Microsoft Windows Server 2022 23h2<10.0.25398.830
Microsoft Windows 11=23H2
10.0.22631.3447
Microsoft Windows 10=22H2
10.0.19045.4291
Microsoft Windows 11=22H2
10.0.22621.3447
Microsoft Windows 11=22H2
10.0.22621.3447
Microsoft Windows Server 2022, 23H2 Edition<10.0.25398.830
10.0.25398.830
Microsoft Windows 10=22H2
10.0.19045.4291
Microsoft Windows 10=22H2
10.0.19045.4291
Microsoft Windows 10=21H2
10.0.19044.4291
Microsoft Windows 10=21H2
10.0.19044.4291
Microsoft Windows 11=23H2
10.0.22631.3447
Microsoft Windows 10=21H2
10.0.19044.4291
Microsoft Windows Server 2022<10.0.20348.2402
10.0.20348.2402
Microsoft Windows Server 2019<10.0.17763.5696
10.0.17763.5696
Microsoft Windows 11=21H2
10.0.22000.2899
Microsoft Windows 11=21H2
10.0.22000.2899
Microsoft Windows 10=1809
10.0.17763.5696
Microsoft Windows 10=1809
10.0.17763.5696
Microsoft Windows Server 2022<10.0.20348.2402
10.0.20348.2402
Microsoft Windows Server 2019<10.0.17763.5696
10.0.17763.5696
Microsoft Windows 10=1809
10.0.17763.5696

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 10.0.22631.3447Patch KB5036893
  2. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 10.0.22621.3447Patch KB5036893
  3. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 10.0.19045.4291Patch KB5036892
  4. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 10.0.25398.830Patch KB5036910
  5. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 10.0.19044.4291Patch KB5036892
  6. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 10.0.17763.5696Patch KB5036896
  7. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 10.0.20348.2402Patch KB5036909
  8. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 10.0.22000.2899Patch KB5036894
  9. Upgrade

    Upgrade Microsoft SmartScreen to a version that resolves this vulnerability.

    Fixed in 10.0.17763.5696Patch KB5036896
  10. Upgrade

    Upgrade Microsoft SmartScreen to a version that resolves this vulnerability.

    Fixed in 10.0.19044.4291Patch KB5036892
  11. Upgrade

    Upgrade Microsoft SmartScreen to a version that resolves this vulnerability.

    Fixed in 10.0.19045.4291Patch KB5036892
  12. Upgrade

    Upgrade Microsoft SmartScreen to a version that resolves this vulnerability.

    Fixed in 10.0.20348.2402Patch KB5036909
  13. Upgrade

    Upgrade Microsoft SmartScreen to a version that resolves this vulnerability.

    Fixed in 10.0.22000.2899Patch KB5036894
  14. Upgrade

    Upgrade Microsoft SmartScreen to a version that resolves this vulnerability.

    Fixed in 10.0.22621.3447Patch KB5036893
  15. Upgrade

    Upgrade Microsoft SmartScreen to a version that resolves this vulnerability.

    Fixed in 10.0.22631.3447Patch KB5036893
  16. Upgrade

    Upgrade Microsoft SmartScreen to a version that resolves this vulnerability.

    Fixed in 10.0.25398.830Patch KB5036910

Event History

Apr 9, 2024
CVE Published
via Microsoft·07:00 AM
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·07:00 AM
Affected Software
Updated
via Microsoft·07:00 AM
Description
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
DescriptionSeverity
Data Sourced
via NVD·05:16 PM
RemedyDescriptionSeverityWeaknessAffected Software
Apr 10, 2024
News Published
via The Register·12:15 AM
News Published
via The Register·12:19 AM
Apr 30, 2024
Known Exploited
via CISA·12:00 AM

Peer vulnerabilities

Found alongside the following vulnerabilities.

Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2024-29988?

CVE-2024-29988 has been categorized as a security feature bypass vulnerability.

2

How do I fix CVE-2024-29988?

To remediate CVE-2024-29988, apply the appropriate security patches released by Microsoft.

3

Which versions of Windows are affected by CVE-2024-29988?

CVE-2024-29988 affects various versions of Windows 10, Windows 11, and Windows Server 2019 and 2022.

4

Can CVE-2024-29988 be exploited without user interaction?

Yes, CVE-2024-29988 can be exploited when an attacker chains it with other vulnerabilities, allowing them to execute malicious files.

5

What is the impact of CVE-2024-29988 if not mitigated?

If not mitigated, CVE-2024-29988 could allow attackers to bypass the Mark of the Web feature and potentially execute harmful files.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203