CVE-2023-32049KEV · OVERDUE

Windows SmartScreen Security Feature Bypass Vulnerability

High · published July 11, 2023

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 8.8. It is confirmed in active exploitation. It sits in the 90.8th percentile for exploit probability.

1179
days past CISA
deadline
CVSS v3.1
8.8
EPSS
4%
Percentile
90.8
In the wild
Confirmed
What it is

🚨 Windows SmartScreen's defenses can be bypassed, putting users at risk for sneaky attacks! This vulnerability could expose systems to dangerous threats! 🔥 Think of SmartScreen as a diligent bouncer at a club, checking IDs before letting anyone in. This vulnerability is like a fake ID that passes the bouncer's inspection, allowing unwanted guests inside! An attacker could exploit this bypass to run malicious software without triggering any warnings, leading to potential data breaches, unauthorized access, or even complete system compromise! The risk here is absolutely critical, as it opens the door to a host of malicious activities!

Put simply

Think of SmartScreen as a diligent bouncer at a club, checking IDs before letting anyone in. This vulnerability is like a fake ID that passes the bouncer's inspection, allowing unwanted guests inside! This vulnerability allows attackers to bypass Windows SmartScreen by tricking it into believing that a harmful application is safe, thus enabling the execution of malicious code without raising any red flags.

What to do

An attacker could exploit this bypass to run malicious software without triggering any warnings, leading to potential data breaches, unauthorized access, or even complete system compromise! The risk here is absolutely critical, as it opens the door to a host of malicious activities! Update your Windows system immediately to the latest security patch to close this loophole. Additionally, ensure that your antivirus and security settings are fully enabled and regularly check for updates. Don't take this lightly! You've got this! By taking these steps, you'll fortify your defenses and help keep your system safe! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.04156 · 90.8th percentile
Published
2023-07-11T17:02Z
KEV added
2023-07-11 · due 2023-08-01
EPSS history
Timeline
  • 11 JUL 17:02Z
    Windows SmartScreen Security Feature Bypass Vulnerability
    cvelistv5
  • 11 JUL 00:00Z
    Added to CISA KEV — remediate by Aug 1
    kev