Microsoft Windows Security App Spoofing Vulnerability

A spoofing vulnerability has been identified in the Windows Security App, allowing an authorized attacker to externally control file names or paths and perform spoofing locally. This issue affects several different versions of the Windows Security App.

Impact

Exploitation of this vulnerability could lead to unauthorized spoofing actions within the Windows Security App.

Remediation

Users can check if they are protected from this vulnerability by ensuring their Windows Security App version is greater than the fixed version. The current version can be found in the 'About' section of the app's settings. For more information on the vulnerability and the security update, please visit the Microsoft Security Update Guide.