CVE-2022-44698

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

CVE-2022-44698 is a security feature bypass vulnerability affecting the Windows SmartScreen component. The flaw carries a CVSS 3.1 score of 5.4 and allows an attacker to circumvent the reputation-based warnings that SmartScreen normally displays for untrusted downloads or web content.

An unauthenticated remote attacker can exploit the issue by convincing a user to open a malicious file or visit a crafted URL, after which SmartScreen protections are bypassed. Successful exploitation results in limited impact to integrity and availability without requiring elevated privileges.

Microsoft has published security updates addressing the vulnerability through its update guide, while CISA includes CVE-2022-44698 in its catalog of known exploited vulnerabilities, indicating confirmed in-the-wild use and underscoring the need for prompt patching. The associated EPSS score currently stands at 0.6722 after reaching a peak of 0.7222, reflecting sustained exploitation interest following disclosure.