PT-2024-2715 · Microsoft · Windows+1

Dmitrij Lenz + 3 · Published 2024-04-09 · Updated 2026-02-06 · CVE-2024-29988

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to April 2024 Patch Tuesday

Description This issue is a security feature bypass vulnerability affecting the SmartScreen Prompt Security Feature in Microsoft Windows. The vulnerability allows attackers to bypass SmartScreen, potentially delivering malicious software to a target system. Exploitation requires user interaction, such as opening a specially crafted file or clicking a malicious link. Reports indicate that this vulnerability is being actively exploited in the wild, and it is related to CVE-2024-21412, which has been exploited by the Water Hydra APT group. The vulnerability impacts the security of web page shortcut prompts.

Recommendations Apply the updates released during the April 2024 Patch Tuesday to address this vulnerability.

Exploit

Fix

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

BDU:2024-02831

CVE-2024-29988

ZDI-24-361

Affected Products

Smartscreen

Windows

References · 77

• 🔥 https://github.com/Sploitus/CVE-2024-29988-exploit · Exploit
• https://zerodayinitiative.com/advisories/ZDI-24-361 · Security Note
• https://osv.dev/vulnerability/CVE-2024-29988 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29988 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-02831 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29988 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-29988 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-29988 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/706649 · Security Note
• https://twitter.com/shah_sheikh/status/1778352437352689817 · Twitter Post
• https://twitter.com/TheNimbleNerd/status/1785395364276605048 · Twitter Post
• https://twitter.com/gothburz/status/1877053391785869787 · Twitter Post
• https://twitter.com/f1tym1/status/1777790967229096371 · Twitter Post
• https://twitter.com/CISACyber/status/1785394973489213892 · Twitter Post
• https://twitter.com/TheZDIBugs/status/1778168757782766033 · Twitter Post