CVE-2023-36025

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
88.2%
EPSS
100%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to bypass Windows Defender SmartScreen checks and their associated prompts.

Vendor
Microsoft
Product
Windows
Added to KEV
Nov 14, 2023
Remediation due
Dec 5, 2023 (US federal deadline)
Ransomware use
Not known
EPSS
88.2% as of Nov 12
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded