CVE-2023-36025
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
CVSS
—
No CVSS
EPSS
88.1%
p100
KEV
YES
Nov 14, 2023
Exploit Today
80
0-100
Published: — · Last modified: —
Product
Microsoft / Windows
Vulnerability
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
Added to KEV
Nov 14, 2023
Remediate by
Dec 5, 2023
Known ransomware use
No
Summary description
Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to bypass Windows Defender SmartScreen checks and their associated prompts.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notes
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-36025; https://nvd.nist.gov/vuln/detail/CVE-2023-36025