{"id":55802,"date":"2024-04-10T00:15:14","date_gmt":"2024-04-10T00:15:14","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/microsoft-squashes-smartscreen-security-bypass-bug-exploited-in-the-wild\/"},"modified":"2024-04-10T00:15:14","modified_gmt":"2024-04-10T00:15:14","slug":"microsoft-squashes-smartscreen-security-bypass-bug-exploited-in-the-wild","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/microsoft-squashes-smartscreen-security-bypass-bug-exploited-in-the-wild\/","title":{"rendered":"Microsoft squashes SmartScreen security bypass bug exploited in the wild"},"content":{"rendered":"

Patch Tuesday<\/span> Microsoft fixed 149 security flaws in its own products this week, and while Redmond acknowledged one of those vulnerabilities is being actively exploited, we’ve been told another hole is under attack, too.<\/p>\n

The bug the IT giant said was being abused in the wild is CVE-2024-26234<\/a>, described as a proxy driver spoofing vulnerability in Windows. This was reported to Redmond by Christopher Budd of Sophos and is rated 6.7 out of 10 on the CVSS severity scale. Microsoft initially listed it as non-exploited then during the day upgraded that to exploited.<\/p>\n

Sophos has published a write-up here<\/a> about the issue, which expands upon research<\/a> emitted by infosec outfit Stairwell in January.<\/p>\n