Windows SmartScreen Security Feature Bypass Vulnerability

Windows SmartScreen, a security feature that warns users about potentially dangerous files, can be bypassed by an attacker. This allows malicious files to reach users without triggering the expected safety warnings.

A code injection vulnerability (CWE-94) in Windows SmartScreen allows attackers to bypass security checks through improper input validation. The attack requires local access or user interaction with a crafted file, but successful exploitation enables execution of malware without security notifications.