8.8

CVE-2023-36025

Warnung

Windows SmartScreen Security Feature Bypass Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Windows 10 1507 Version - HwPlatform x64
Microsoft ≫ Windows 10 1507 Version - HwPlatform x86
Microsoft ≫ Windows 10 1607 Version - HwPlatform x64
Microsoft ≫ Windows 10 1607 Version - HwPlatform x86
Microsoft ≫ Windows 10 1809 Version - HwPlatform arm64
Microsoft ≫ Windows 10 1809 Version - HwPlatform x64
Microsoft ≫ Windows 10 1809 Version - HwPlatform x86
Microsoft ≫ Windows 10 21h2 Version - HwPlatform arm64
Microsoft ≫ Windows 10 21h2 Version - HwPlatform x64
Microsoft ≫ Windows 10 21h2 Version - HwPlatform x86
Microsoft ≫ Windows 10 22h2 Version - HwPlatform arm64
Microsoft ≫ Windows 10 22h2 Version - HwPlatform x64
Microsoft ≫ Windows 10 22h2 Version - HwPlatform x86
Microsoft ≫ Windows 11 21h2 Version - HwPlatform arm64
Microsoft ≫ Windows 11 21h2 Version - HwPlatform x64
Microsoft ≫ Windows 11 22h2 Version - HwPlatform arm64
Microsoft ≫ Windows 11 22h2 Version - HwPlatform x64
Microsoft ≫ Windows 11 23h2 Version - HwPlatform arm64
Microsoft ≫ Windows 11 23h2 Version - HwPlatform x64
Microsoft ≫ Windows Server 2008 Version - Update sp2 HwPlatform x86
Microsoft ≫ Windows Server 2008 Version r2 Update sp1 HwPlatform x64
Microsoft ≫ Windows Server 2016 Version < 10.0.14393.6452
Microsoft ≫ Windows Server 2019 Version < 10.0.17763.5122
Microsoft ≫ Windows Server 2022 Version < 10.0.20348.2113

14.11.2023: CISA Known Exploited Vulnerabilities (KEV) Catalog

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

Schwachstelle

Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to bypass Windows Defender SmartScreen checks and their associated prompts.

Beschreibung

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 88.2% 0.997
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Microsoft 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36025
Patch
Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-36025
US Government Resource