Actively exploited in the wild
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2023-11-14. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2023-36025
HighCVSS 8.8KEVSummary
A security feature bypass vulnerability in Windows SmartScreen. It may allow an attacker to bypass protective mechanisms.
Risk Assessment
Could allow an attacker to run malicious software without SmartScreen warnings.
Recommendation
Apply Windows security updates provided by Microsoft.
Other vulnerabilities in Windows SmartScreen
See all- CVE-2024-29988HighActively exploited
A vulnerability in the SmartScreen Prompt allows a security feature bypass. Technical details are not disclosed in the description.
- CVE-2024-21351HighActively exploited
A security feature bypass vulnerability in Windows SmartScreen.
- CVE-2023-32049HighActively exploited
Windows SmartScreen Security Feature Bypass Vulnerability. Technical details are not provided in the description.
Original NVD description (English source)
Windows SmartScreen Security Feature Bypass Vulnerability