CVE-2023-36025

Deeper analysis

Windows SmartScreen Security Feature Bypass Vulnerability affects the SmartScreen component in Windows and carries a CVSS 3.1 score of 8.8 with an attack vector of network, low complexity, no required privileges, and required user interaction. Successful exploitation can result in high impact to confidentiality, integrity, and availability.

An attacker can deliver malicious content over the network that bypasses SmartScreen protections when a user interacts with it, enabling arbitrary code execution or other high-impact actions on the target system without needing elevated privileges.

Microsoft security updates address the issue through the MSRC advisory, while CISA lists the CVE in its catalog of known exploited vulnerabilities, confirming active exploitation in the wild. The associated EPSS score remains elevated at a current value of 0.9021 with a peak of 0.9188.