Firetruck

CVE-2023-36025

KEV

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

View CVE record →
Vendor / Project
Microsoft
Product
Windows
Date added
Nov 14, 2023
Due date
Dec 5, 2023
Known ransomware use
Unknown
CWEs
—

Description

Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to bypass Windows Defender SmartScreen checks and their associated prompts.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes