CVE-2023-36025
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
Published Nov 14, 2023 · updated Jun 16, 2026 · microsoft windows 10 1507
Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to bypass Windows Defender SmartScreen checks and their associated prompts.
Timeline
Detection, updates, and resolution for this record.
Nov 14, 2023 · Catalog
Detected
Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to bypass Windows Defender SmartScreen checks and their associated prompts.
Nov 14, 2023 · CISA KEV
Known exploited
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Dec 5, 2023 · CISA KEV
Remediation due
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Jun 16, 2026 · Catalog
Updated
Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to bypass Windows Defender SmartScreen checks and their associated prompts.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA due date Dec 5, 2023
Affected
- cpe microsoft/windows 10 1507version unspecified
- cpe microsoft/windows 10 1607version unspecified
- cpe microsoft/windows 10 1809version unspecified
- cpe microsoft/windows 10 21h2version unspecified
- vendor Microsoft Windowsversion unspecified
Sources
- CISA KEVCVE-2023-36025
Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to bypass Windows Defender SmartScreen checks and their associated prompts.
cisa.gov - CVE.orgCVE-2023-36025
Official CVE identifier
cve.org - FIRST EPSSCVE-2023-36025
30-day exploitation probability 88.1%
first.org - NIST NVDCVE-2023-36025
Windows SmartScreen Security Feature Bypass Vulnerability
nvd.nist.gov