CISA Known Exploited Vulnerability

CVE-2023-36025

Microsoft · Windows

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

Date added
BOD 22-01 due date
CWE
Ransomware Unknown

CISA description

Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to bypass Windows Defender SmartScreen checks and their associated prompts.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.