CVE-2022-44698VulnerabilityPublished 12/13/2022Updated 10/24/2026
CVE-2022-44698: Microsoft Defender SmartScreen Security Feature Bypass Vulnerability
Affects Microsoft DefenderSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 12/13/2022
- KEV deadline
- 01/03/2023
- Ransomware
- Used in ransomware campaigns
- EPSS
- 76.3% chance of exploitation in 30 days – higher than 99% of CVEs
What to do
CISA required action
Apply updates per vendor instructions.
Description
Microsoft Defender SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file.