CVE-2022-41091

Summary dbcve.org

This is a security feature bypass vulnerability in Windows Mark of the Web (MOTW), which is a Windows security mechanism that tags files downloaded from the internet or originating from untrusted sources with metadata to apply restrictive behaviors. The vulnerability allows attackers to circumvent these protections, potentially enabling malicious files to execute with fewer restrictions than intended.

Mitigation

Apply the Microsoft security update for CVE-2022-41091 to affected Windows systems; ensure Windows Update is enabled and systems are patched to the latest supported releases.