CVE-2023-36025

HIGH8.8

CISA KEVHigh EPSS

JSON export Create alert

Description

Windows SmartScreen Security Feature Bypass Vulnerability

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

E

F

RL

O

RC

Changed

Affected products

microsoft / Windows 10 Version 150710.0.10240.0 – 10.0.10240.20308
microsoft / Windows 10 Version 160710.0.14393.0 – 10.0.14393.6452
microsoft / Windows 10 Version 180910.0.17763.0 – 10.0.17763.5122
microsoft / Windows 10 Version 180910.0.0 – 10.0.17763.5122
microsoft / Windows 10 Version 21H210.0.19043.0 – 10.0.19043.3693
microsoft / Windows 10 Version 22H210.0.19045.0 – 10.0.19045.3693
microsoft / Windows 11 version 21H210.0.0 – 10.0.22000.2600
microsoft / Windows 11 version 22H210.0.22621.0 – 10.0.22621.2715
microsoft / Windows 11 version 22H310.0.22631.0 – 10.0.22631.2715
microsoft / Windows 11 version 23H210.0.22631.0 – 10.0.22631.2715
microsoft / Windows Server 2008 R2 Service Pack 16.1.7601.0 – 6.1.7601.26816
microsoft / Windows Server 2008 R2 Service Pack 1 (Server Core installation)6.1.7601.0 – 6.1.7601.26816
microsoft / Windows Server 2008 Service Pack 26.0.6003.0 – 6.0.6003.22367
microsoft / Windows Server 2008 Service Pack 2 (Server Core installation)6.0.6003.0 – 6.0.6003.22367
microsoft / Windows Server 20126.2.9200.0 – 6.2.9200.24569
microsoft / Windows Server 2012 R26.3.9600.0 – 6.3.9600.21668
microsoft / Windows Server 2012 R2 (Server Core installation)6.3.9600.0 – 6.3.9600.21668
microsoft / Windows Server 2012 (Server Core installation)6.2.9200.0 – 6.2.9200.24569
microsoft / Windows Server 201610.0.14393.0 – 10.0.14393.6452
microsoft / Windows Server 2016 (Server Core installation)10.0.14393.0 – 10.0.14393.6452
microsoft / Windows Server 201910.0.17763.0 – 10.0.17763.5122
microsoft / Windows Server 2019 (Server Core installation)10.0.17763.0 – 10.0.17763.5122
microsoft / Windows Server 202210.0.20348.0 – 10.0.20348.2113
microsoft / Windows Server 2022, 23H2 Edition (Server Core installation)10.0.25398.0 – 10.0.25398.531

References

VENDOR_ADVISORYhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36025

Updated 10m ago · 8 sources