CVE-2024-21351
CISA KEV
ACT NOW
Priority: 0.00
BB Relevance:
6/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience and inject code to potentially gain code execution, which could lead to some data exposure, lack of system availability, or both.
CISA Known Exploited Vulnerability
Vendor / Product
Microsoft — Windows
Date Added
2024-02-13
Remediation Due
2024-03-05
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-21351; https://nvd.nist.gov/vuln/detail/CVE-2024-21351
Weakness Classification (1)
Affected Software (12)
| Vendor | Product | Version |
|---|---|---|
| microsoft | windows_10_1507 | < 10.0.10240.20469 |
| microsoft | windows_10_1607 | < 10.0.14393.6709 |
| microsoft | windows_10_1809 | < 10.0.17763.5458 |
| microsoft | windows_10_21h2 | < 10.0.19044.4046 |
| microsoft | windows_10_22h2 | < 10.0.19045.4046 |
| microsoft | windows_11_21h2 | < 10.0.22000.2777 |
| microsoft | windows_11_22h2 | < 10.0.22621.3155 |
| microsoft | windows_11_23h2 | < 10.0.22631.3155 |
| microsoft | windows_server_2016 | - |
| microsoft | windows_server_2019 | < 10.0.17763.5458 |
| microsoft | windows_server_2022 | < 10.0.20348.2322 |
| microsoft | windows_server_2022_23h2 | < 10.0.25398.709 |
References & Advisories (2)
US Government Resource
Patch
Vendor Advisory