Description
Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature over a network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Windows 10 Version 1507 | 10.0.10240.0 – < 10.0.10240.20978 | 10.0.10240.20978 |
| Microsoft | Windows Server 2012 | 6.2.9200.0 – < 6.2.9200.25423 | 6.2.9200.25423 |
| Microsoft | Windows Server 2012 (Server Core installation) | 6.2.9200.0 – < 6.2.9200.25423 | 6.2.9200.25423 |
| Microsoft | Windows Server 2012 R2 | 6.3.9600.0 – < 6.3.9600.22523 | 6.3.9600.22523 |
| Microsoft | Windows Server 2012 R2 (Server Core installation) | 6.3.9600.0 – < 6.3.9600.22523 | 6.3.9600.22523 |
Advisories 3
- WID-SEC-2025-0744 Microsoft Windows: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2025
- MSRC-CVE-2025-27472 Windows Mark of the Web Security Feature Bypass Vulnerability Microsoft Security Response Center · Apr 9, 2025
- NCSC-2025-0112 Kwetsbaarheden verholpen in Microsoft Windows NCSC-NL (Netherlands) · Apr 8, 2025
References
- Windows Mark of the Web Security Feature Bypass Vulnerability vendor-advisory patch