⚠ Actively exploited
Added to CISA KEV on 2023-11-14. Federal agencies required to patch by 2023-12-05. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable..

CVE-2023-36025 — Microsoft Windows 10 Version 1507 vulnerability

67 documents18 sources
Severity
8.8HIGHNVD
EPSS
90.2%
top 0.41%
CISA KEV
KEV
Added 2023-11-14
Due 2023-12-05
Exploit
Exploited in wild
Active exploitation observed
Affected products
32
Microsoft Windows 10 Version 1507Microsoft Windows 10 Version 1607Microsoft Windows 10 Version 1809+29 more
Timeline
PublishedNov 14
KEV addedNov 14
KEV dueDec 5
Latest updateOct 28
CISA Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Description

Windows SmartScreen Security Feature Bypass Vulnerability

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages32 packages

▶NVDmicrosoft/windows< 10.0.14393.6452+3
▶CVEListV5microsoft/windows_server_20126.2.9200.0 — 6.2.9200.24569
▶CVEListV5microsoft/windows_server_201610.0.14393.0 — 10.0.14393.6452
▶CVEListV5microsoft/windows_server_201910.0.17763.0 — 10.0.17763.5122
▶CVEListV5microsoft/windows_server_202210.0.20348.0 — 10.0.20348.2113

Patches

Patch: msrc.microsoft.com ↗Patch: msrc.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-4jff-227j-6g3v: Windows SmartScreen Security Feature Bypass Vulnerability↗2023-11-14
▶
VulnCheck
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability↗2023
▶

🔍Detection Rules

6
Suricata
ET MALWARE WebDAV Retrieving .vbs from .url M1 (CVE-2023-36025)↗2023-11-29
▶
Suricata
ET MALWARE WebDAV Retrieving .vbs from .url M2 (CVE-2023-36025)↗2023-11-29
▶
Suricata
ET MALWARE WebDAV Retrieving .zip from .url M2 (CVE-2023-36025)↗2023-11-28
▶
Suricata
ET MALWARE WebDAV Retrieving .exe from .url M2 (CVE-2023-36025)↗2023-11-28
▶
Suricata
ET MALWARE WebDAV Retrieving .exe from .url M1 (CVE-2023-36025)↗2023-11-27
▶

📋Vendor Advisories

2
Microsoft
Windows SmartScreen Security Feature Bypass Vulnerability↗2023-11-14
▶
CISA
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability↗2023-11-14
▶

🕵️Threat Intelligence

55
Elastic
Katz and Mouse Game: MaaS Infostealers Adapt to Patched Chrome Defenses — Elastic Security Labs↗2024-10-28
▶
Trendmicro
CVE-2024-38213: Copy2Pwn Exploit Evades Windows Web Protections↗2024-08-15
▶
Bleepingcomputer
New Windows SmartScreen bypass exploited as zero-day since March↗2024-08-13
▶
Bleepingcomputer
Microsoft fixes two Windows zero-days exploited in malware attacks↗2024-04-09
▶
Bleepingcomputer
Microsoft April 2024 Patch Tuesday fixes 150 security flaws, 67 RCEs↗2024-04-09
▶

📄Research Papers

1
CTF
insane / README↗
▶
CVE-2023-36025 — Microsoft vulnerability | cvebase