CVE-2024-21412Vulnerability
Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Reported by 2 independent sources · first reported by Huntress · last reported
Last reported 30 days ago
CISA KEVAdded 13 Feb 2024
Fix due 5 Mar 2024
Used by ransomware: knownCISA KEV catalogue
Fix due 5 Mar 2024
Used by ransomware: knownCISA KEV catalogue
EPSS99.4%
higher than 99% of CVEsFIRST EPSS, as of 17 Oct 2026
higher than 99% of CVEsFIRST EPSS, as of 17 Oct 2026
What the reports say
2 reports, newest first · the exact sentence from each-
ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories“… a reputation by leveraging two separate zero days to deliver its malware: WinRAR (CVE-2023-38831) and Windows Defender SmartScreen (CVE-2024-21412)," Huntress said.”
-
DarkMe RAT: A VB6 APT Trojan Turned Conventional Infostealer“… a reputation by leveraging two separate zero days to deliver its malware: WinRAR (CVE-2023-38831) and Windows Defender SmartScreen (CVE-2024-21412).”
Indicators reported together
named in the same reports- exploit[.]inin 1 report
- posh[.]vipin 1 report
- onecause[.]comin 1 report
- raiselysite[.]comin 1 report
- adminmenueditor[.]comin 1 report
- hxxps://readonline365[.]com/view/image.pngin 1 report
- readonline365[.]comin 1 report
- hxxps://onlineview365[.]com/propi.msiin 1 report
- onlineview365[.]comin 1 report
- files[.]cabin 1 report
- 54ed18aa883b5379…47dc81dd5b76in 1 report
- thatawful[.]boutiquein 1 report
- 67.43.50[.]11in 1 report
- effectivecpmnetwork[.]comin 1 report
- megchartedbk7[.]comin 1 report
- storageonline[.]mein 1 report
- viewdocument[.]livein 1 report
- advancedfuturetechnology[.]comin 1 report
- sharedfuturetech[.]comin 1 report
Copy these 19 indicators · defanged
Also named with it: CVE-2023-38831
Thanks — we review every report.