CVE-2024-38217 is a vulnerability in Microsoft Windows 10 Version 1507 (specifically versions =10.0.17763.0 and =10.0.10240.0) where the Mark of the Web security feature can be bypassed. This feature is intended to protect users from potentially unsafe content downloaded from the internet by marking such content and enforcing restrictions. The bypass constitutes a protection mechanism failure (CWE-693), potentially allowing an attacker to circumvent these security restrictions. The vulnerability has a CVSS 3.1 base score of 5.4 (medium severity) with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact. Microsoft has published an official fix for this vulnerability.

The vulnerability allows bypassing the Mark of the Web security feature, which may enable attackers to circumvent security restrictions on content originating from untrusted sources. This could lead to limited integrity and availability impacts on affected systems. There is no known exploitation in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38217 to remediate this vulnerability.