CVE-2024-29988:

SmartScreen Prompt Security Feature Bypass Vulnerability (CVE-2024-29988) could allow bypassing Windows SmartScreen prompts, potentially enabling execution of untrusted content after user interaction on multiple Windows client and server editions.

Score
A numerical rating that indicates how dangerous this vulnerability is.

8.8High

Published Date:Apr 9, 2024
CISA KEV Date:Apr 30, 2024
Industries Affected:20

Armis Early Warning:

21 Days

Threat Predictions

EPSS Score:62.8
EPSS Percentile:98%

Exploitability

Score:2.8
Attack Vector:NETWORK
Attack Complexity:LOW
Privileges Required:NONE
User Interaction:REQUIRED
Scope:UNCHANGED

Impact

Score:5.9
Confidentiality Impact:HIGH
Integrity Impact:HIGH
Availability Impact:HIGH

Description Preview

Overview

CVE-2024-29988 is a high-severity vulnerability impacting a range of Windows client and server editions, where the SmartScreen security feature can be bypassed after user interaction, potentially allowing the execution of untrusted content. Classified as CWE-693: Protection Mechanism Failure, the flaw presents a substantial risk to confidentiality, integrity, and availability. The exploitation requires user interaction, does not require prior authentication, and the overall impact is rated high. Microsoft has issued notices with affected products and update guidance to remediate the issue.

Remediation

Install the latest Microsoft security updates that address CVE-2024-29988 for all affected Windows client and server editions (via Windows Update, WSUS, or your enterprise patch management solution).
Ensure systems are configured to receive and apply updates promptly, and reboot after patch installation as required.
Verify patch deployment by checking installed update versions or KB numbers against the Microsoft Update Guide for CVE-2024-29988.
In environments unable to patch immediately, monitor Microsoft advisories and consider temporary mitigations or phased rollout plans per your change management processes; prioritize patching in exposed or high-risk systems.
Validate through testing in a controlled lab before broad production deployment to confirm the vulnerability has been mitigated and functionality remains intact.