PT-2022-5868 · Microsoft · Windows Smartscreen+1

Published 2022-12-13 · Updated 2025-03-13 · CVE-2022-44698

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Windows SmartScreen (affected versions not specified)

Description The issue is related to errors in security settings of the Windows SmartScreen component, which is responsible for protection against phishing and malicious software. Exploitation of this issue may allow a remote attacker to bypass security restrictions by uploading specially crafted malicious files.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

CWE-254

Related Identifiers

BDU:2022-07283

CVE-2022-44698

Affected Products

Windows

Windows Smartscreen

References · 27

• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2022-44698 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-44698 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-44698 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-07283 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-44698 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-44698 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-44698 · Security Note
• https://t.me/cibsecurity/54463 · Telegram Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog · Note
• https://twitter.com/cybergibbons/status/1737541853908476065 · Twitter Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-44698 · Note
• https://t.me/true_secator/3828 · Telegram Post
• https://t.me/cvenotify/114639 · Telegram Post
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-44698 · Note
• https://t.me/aptreports/3114 · Telegram Post