<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
  <title>Microsoft February 2024: 2 actively exploited zero-days · updates</title>
  <link>https://pwn.watch/i/microsoft-zero-days-february-2024-21351-21412</link>
  <description>CVE-2024-21351: Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience and inject code to potentially gain code execution, which could lead to some data exposure, lack of system availability, or both. CVE-2024-21412: Microsoft Windows Internet Shortcut Files contains an unspecified vulnerability that allows for a security feature bypass. Added to the CISA KEV catalog on 2024-02-13. CISA lists known use in ransomware campaigns.</description>
  <language>en</language>
  <lastBuildDate>Tue, 13 Feb 2024 00:00:00 GMT</lastBuildDate>
  <atom:link href="https://pwn.watch/i/microsoft-zero-days-february-2024-21351-21412/feed.xml" rel="self" type="application/rss+xml" />
  <item>
    <title>Microsoft February 2024: 2 actively exploited zero-days: CVE-2024-21351 published</title>
    <link>https://pwn.watch/i/microsoft-zero-days-february-2024-21351-21412</link>
    <guid isPermaLink="false">https://pwn.watch/i/microsoft-zero-days-february-2024-21351-21412#2024-02-13-53f63db1</guid>
    <pubDate>Tue, 13 Feb 2024 00:00:00 GMT</pubDate>
    <category>high</category>
    <description>&lt;p&gt;&lt;a href=&quot;https://nvd.nist.gov/vuln/detail/CVE-2024-21351&quot;&gt;Source&lt;/a&gt;&lt;/p&gt;</description>
  </item>
  <item>
    <title>Microsoft February 2024: 2 actively exploited zero-days: CVE-2024-21412 published</title>
    <link>https://pwn.watch/i/microsoft-zero-days-february-2024-21351-21412</link>
    <guid isPermaLink="false">https://pwn.watch/i/microsoft-zero-days-february-2024-21351-21412#2024-02-13-efce2c91</guid>
    <pubDate>Tue, 13 Feb 2024 00:00:00 GMT</pubDate>
    <category>high</category>
    <description>&lt;p&gt;&lt;a href=&quot;https://nvd.nist.gov/vuln/detail/CVE-2024-21412&quot;&gt;Source&lt;/a&gt;&lt;/p&gt;</description>
  </item>
  <item>
    <title>Microsoft February 2024: 2 actively exploited zero-days: CISA added CVE-2024-21351 to the KEV catalog (federal deadline 2024-03-05)</title>
    <link>https://pwn.watch/i/microsoft-zero-days-february-2024-21351-21412</link>
    <guid isPermaLink="false">https://pwn.watch/i/microsoft-zero-days-february-2024-21351-21412#2024-02-13-191f57c8</guid>
    <pubDate>Tue, 13 Feb 2024 00:00:00 GMT</pubDate>
    <category>high</category>
    <description>&lt;p&gt;&lt;a href=&quot;https://www.cisa.gov/known-exploited-vulnerabilities-catalog&quot;&gt;Source&lt;/a&gt;&lt;/p&gt;</description>
  </item>
  <item>
    <title>Microsoft February 2024: 2 actively exploited zero-days: CISA added CVE-2024-21412 to the KEV catalog (federal deadline 2024-03-05)</title>
    <link>https://pwn.watch/i/microsoft-zero-days-february-2024-21351-21412</link>
    <guid isPermaLink="false">https://pwn.watch/i/microsoft-zero-days-february-2024-21351-21412#2024-02-13-58af7018</guid>
    <pubDate>Tue, 13 Feb 2024 00:00:00 GMT</pubDate>
    <category>high</category>
    <description>&lt;p&gt;&lt;a href=&quot;https://www.cisa.gov/known-exploited-vulnerabilities-catalog&quot;&gt;Source&lt;/a&gt;&lt;/p&gt;</description>
  </item>
</channel>
</rss>
