CVE-2022-41049VulnerabilityPublished 11/14/2022Updated 10/24/2026
CVE-2022-41049: Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
Affects Microsoft WindowsSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 11/14/2022
- KEV deadline
- 12/09/2022
- EPSS
- 2.6% chance of exploitation in 30 days – higher than 85% of CVEs
What to do
CISA required action
Apply updates per vendor instructions.
Description
Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features.