CVE-2023-36025: high-severity vulnerability in Microsoft Windows 10 Version 1507
Windows SmartScreen Security Feature Bypass Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Windows SmartScreen, a security feature that warns users about potentially dangerous files and websites, can be bypassed by attackers. This means malicious files could be downloaded and executed without triggering the security warning that normally protects users.
This vulnerability allows an attacker to bypass the SmartScreen reputation check through a crafted file or URI parameter manipulation, enabling delivery of malware without triggering security alerts. Exploitation requires user interaction (file download or opening a link) but can result in arbitrary code execution due to disabled security warnings.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.