---
id: "CVE-2023-36025"
kind: "vulnerability"
aliases: ["CVE-2023-36025"]
title: "Windows SmartScreen Security Feature Bypass Vulnerability"
severity: "high"
cvss: 8.8
epss: null
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "Microsoft Windows", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "microsoft windows 10 1507", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "microsoft windows 10 1607", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "microsoft windows 10 1809", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "microsoft windows 10 21h2", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "microsoft windows 10 22h2", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "microsoft windows 11 21h2", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "microsoft windows 11 22h2", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "microsoft windows 11 23h2", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "microsoft windows server 2008", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "microsoft windows server 2008", "fixed": [], "affected": "= r2", "ecosystem": "vendor"}, {"name": "microsoft windows server 2012", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "microsoft windows server 2012", "fixed": [], "affected": "= r2", "ecosystem": "vendor"}, {"name": "microsoft windows server 2016", "fixed": ["10.0.14393.6452"], "affected": "< 10.0.14393.6452", "ecosystem": "vendor"}, {"name": "microsoft windows server 2019", "fixed": ["10.0.17763.5122"], "affected": "< 10.0.17763.5122", "ecosystem": "vendor"}, {"name": "microsoft windows server 2022", "fixed": ["10.0.20348.2113"], "affected": "< 10.0.20348.2113", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["endpoints", "exploited", "infrastructure", "windows"]
not_affected_if: ["non-windows"]
published_at: "2023-11-14T00:00:00+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-23T22:29:04+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-36025", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36025", "first_seen_at": "2026-10-23T22:29:04+00:00"}]
---

# Windows SmartScreen Security Feature Bypass Vulnerability

Windows SmartScreen has a security feature bypass that lets an attacker get past its checks and warning prompts on downloaded or opened content. It is listed in CISA's Known Exploited Vulnerabilities catalog, so attacks have been observed in the wild.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Microsoft Windows affected ? fixed ?
- vendor:microsoft windows 10 1507 affected ? fixed ?
- vendor:microsoft windows 10 1607 affected ? fixed ?
- vendor:microsoft windows 10 1809 affected ? fixed ?
- vendor:microsoft windows 10 21h2 affected ? fixed ?
- vendor:microsoft windows 10 22h2 affected ? fixed ?
- vendor:microsoft windows 11 21h2 affected ? fixed ?
- vendor:microsoft windows 11 22h2 affected ? fixed ?
- vendor:microsoft windows 11 23h2 affected ? fixed ?
- vendor:microsoft windows server 2008 affected ? fixed ?
- vendor:microsoft windows server 2008 affected = r2 fixed ?
- vendor:microsoft windows server 2012 affected ? fixed ?
- vendor:microsoft windows server 2012 affected = r2 fixed ?
- vendor:microsoft windows server 2016 affected < 10.0.14393.6452 fixed 10.0.14393.6452
- vendor:microsoft windows server 2019 affected < 10.0.17763.5122 fixed 10.0.17763.5122
- vendor:microsoft windows server 2022 affected < 10.0.20348.2113 fixed 10.0.20348.2113

## How to check

Check the installed Windows build against Microsoft's security update guide for CVE-2023-36025 (unknown whether the sources list affected builds).

## Fix

Apply the Microsoft security update for CVE-2023-36025 for your Windows version; if no update is available, follow Microsoft's mitigation instructions or stop using the affected product, per CISA's required action.

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-36025
- 2026-10-23T22:29:04+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2023-36025

## From the sources

Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to bypass Windows Defender SmartScreen checks and their associated prompts.

CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_