NVD disclosure day

Published threat advisories for March 14, 2023

CVE advisoryKnown Exploit

CVE-2023-24880

Windows SmartScreen Bypass Vulnerability.

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A vulnerability in Windows SmartScreen allows bypassing defenses for malicious files. This impacts affected Windows systems by enabling attackers to evade security warnings, posing a risk to data integrity and system access. Organizations should apply vendor updates.

NVD published: • CISA KEV
CVE advisoryKnown Exploit

CVE-2023-23397

Microsoft Outlook Credential Relay Risk

Halo Surface Signal: 2 out of 5 — less likely to be public-facing.

Microsoft Outlook has a vulnerability that can allow attackers to gain unauthorized access by relaying user authentication to other services. This poses a risk to organizational data and systems. Organizations should identify affected systems, mitigate exposure, and apply vendor updates.

NVD published: • CISA KEV