CVE-2023-32049

Deeper analysis

Windows SmartScreen contains a security feature bypass vulnerability that affects the Windows operating system component responsible for warning users about potentially malicious downloads and web content. The flaw is tracked as CVE-2023-32049 with a CVSS 3.1 score of 8.8, reflecting network attack vectors, low attack complexity, and no required privileges, though user interaction is needed to trigger the issue.

An unauthenticated remote attacker can exploit the bypass by serving specially crafted content that SmartScreen fails to evaluate correctly. Successful exploitation allows the attacker to suppress security prompts, enabling users to execute or access malicious files or sites that would otherwise be blocked, resulting in full compromise of confidentiality, integrity, and availability on the affected system.

Microsoft has published guidance and patches through its Security Response Center, while CISA has added the CVE to its catalog of known exploited vulnerabilities in the wild. The associated EPSS score has remained stable near 0.09 with no material increase since disclosure.