CVE-2022-41091VulnerabilityPublished 11/08/2022Updated 10/24/2026
CVE-2022-41091: Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
Affects Microsoft WindowsSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 11/08/2022
- KEV deadline
- 12/09/2022
- Ransomware
- Used in ransomware campaigns
- EPSS
- 1.9% chance of exploitation in 30 days – higher than 79% of CVEs
What to do
CISA required action
Apply updates per vendor instructions.
Description
Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features.