Windows 10 Version 1809, Windows Server 2019, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 22H2, Windows 10 Version 1607, Windows Server 2016
CVE-2022-44698: Windows SmartScreen Security Feature Bypass Vulnerability
Windows SmartScreen Security Feature Bypass Vulnerability
Published
ExploitedYes, in CISA KEVAdded 13 Dec 2022
Ransomware useKnownPer CISA
SeverityMEDIUMCVSS 3.1 5.4
EPSS76%Chance of exploitation in 30 days
Public exploitNot tracked
FixAvailable
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Windows 10 Version 1809 (32-bit Systems, x64-based Systems) 10.0 | 10.0.17763.3770 or later |
| Windows 10 Version 1809 (ARM64-based Systems) 10.0 | 10.0.17763.3770 or later |
| Windows Server 2019 (x64-based Systems) 10.0 | 10.0.17763.3770 or later |
| Windows 10 Version 21H1 (x64-based Systems, ARM64-based Systems, 32-bit Systems) 10.0 | 10.0.19043.2364 or later |
| Windows Server 2022 (x64-based Systems) 10.0 | 10.0.20348.1366 or later |
| Windows 10 Version 20H2 (32-bit Systems, ARM64-based Systems) 10.0 | 10.0.19042.2364 or later |
| Windows 11 version 21H2 (x64-based Systems, ARM64-based Systems) 10.0 | 10.0.22000.1335 or later |
| Windows 10 Version 21H2 (32-bit Systems, ARM64-based Systems, x64-based Systems) 10.0 | 10.0.19044.2364 or later |
| Windows 10 Version 22H2 (x64-based Systems, ARM64-based Systems, 32-bit Systems) 10.0 | 10.0.19045.2364 or later |
| Windows 10 Version 1607 (32-bit Systems, x64-based Systems) 10.0 | 10.0.14393.5582 or later |
| Windows Server 2016 (x64-based Systems) 10.0 | 10.0.14393.5582 or later |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
Windows SmartScreen Security Feature Bypass Vulnerability
Exploitation
CISA lists this CVE as exploited in the wild since 13 Dec 2022, including in ransomware campaigns.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 11 Oct 2026.