NIST has updated the NVD program announcement page with additional information regarding recent concerns and the temporary delays in enrichment efforts.
CVE-2024-29988 Detail
Undergoing Analysis
This vulnerability is currently undergoing analysis and not all information is available. Please check back soon to view the completed vulnerability summary. DescriptionSmartScreen Prompt Security Feature Bypass Vulnerability Severity
CVSS 3.x Severity and Metrics:
CNA: Microsoft Corporation
Base
Score: 8.8 HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD Analysts use publicly available information to associate vector strings and CVSS scores. We also display any CVSS information provided within the CVE List from the CNA. Note: The CNA providing a score has achieved an Acceptance Level of Provider. The NVD will only audit a subset of scores provided by this CNA. References to Advisories, Solutions, and ToolsBy selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.
This CVE is in CISA's Known Exploited Vulnerabilities CatalogReference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.
Weakness Enumeration
Quick InfoCVE Dictionary Entry:CVE-2024-29988 NVD Published Date: 04/09/2024 NVD Last Modified: 04/30/2024 Source: Microsoft Corporation |