ZeroDay Findings
Sign inSign up

Findings

CVE-2024-21351

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

Published Feb 13, 2024 · updated Aug 10, 2026 · microsoft windows 10 1507

Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience and inject code to potentially gain code execution, which could lead to some data exposure, lack of system availability, or both.

Timeline

Detection, updates, and resolution for this record.

  1. Feb 13, 2024 · Catalog

    Detected

    Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience and inject code to potentially gain code execution, which could lead to some data exposure, lack of system availability, or both.

  2. Feb 13, 2024 · CISA KEV

    Known exploited

    Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

  3. Mar 5, 2024 · CISA KEV

    Remediation due

    Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

  4. Aug 10, 2026 · Catalog

    Updated

    Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience and inject code to potentially gain code execution, which could lead to some data exposure, lack of system availability, or both.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CISA due date Mar 5, 2024

Affected

  • cpe microsoft/windows 10 1507version unspecified
  • cpe microsoft/windows 10 1607version unspecified
  • cpe microsoft/windows 10 1809version unspecified
  • cpe microsoft/windows 10 21h2version unspecified
  • cpe microsoft/windows 10 22h2version unspecified
  • cpe microsoft/windows 11 21h2version unspecified
  • cpe microsoft/windows 11 22h2version unspecified
  • cpe microsoft/windows 11 23h2version unspecified
  • vendor Microsoft Windowsversion unspecified

Sources

  • CISA KEVCVE-2024-21351

    Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience and inject code to potentially gain code execution, which could lead to some data exposure, lack of system availability, or both.

    cisa.gov
  • CVE.orgCVE-2024-21351

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2024-21351

    30-day exploitation probability 27.8%

    first.org
  • NIST NVDCVE-2024-21351

    Windows SmartScreen Security Feature Bypass Vulnerability

    nvd.nist.gov

References