NetSight
high8.8Known exploited

CVE-2023-32049

Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2023-07-11. Federal due date: 2023-08-01.

Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

Impact

Windows SmartScreen Security Feature Bypass Vulnerability

Affected products

VendorProductAffected versions
MicrosoftWindows 10 1607
before 10.0.14393.6085
MicrosoftWindows 10 1809
before 10.0.17763.4645
MicrosoftWindows 10 21h2
before 10.0.19041.3208
MicrosoftWindows 10 22h2
before 10.0.19045.3208
MicrosoftWindows 11 21h2
before 10.0.22000.2176
MicrosoftWindows 11 22h2
before 10.0.22621.1992
MicrosoftWindows Server 2016
All versions
MicrosoftWindows Server 2019
All versions
MicrosoftWindows Server 2022
All versions

References