Actively exploited in the wild
Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2023-07-11. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
CVE-2023-32049
HighCVSS 8.8KEVSummary
Windows SmartScreen Security Feature Bypass Vulnerability. Technical details are not provided in the description.
Risk Assessment
An attacker could bypass the SmartScreen mechanism, potentially facilitating the execution of malware on a protected system.
Recommendation
Apply Windows security updates provided by Microsoft. Monitor for unusual application behavior.
Other vulnerabilities in Windows SmartScreen
See all- CVE-2024-29988HighActively exploited
A vulnerability in the SmartScreen Prompt allows a security feature bypass. Technical details are not disclosed in the description.
- CVE-2024-21351HighActively exploited
A security feature bypass vulnerability in Windows SmartScreen.
- CVE-2023-36025HighActively exploited
A security feature bypass vulnerability in Windows SmartScreen. It may allow an attacker to bypass protective mechanisms.
- CVE-2023-24880MediumActively exploited
Windows SmartScreen Security Feature Bypass Vulnerability. Details are not provided in the description.
- CVE-2022-44698MediumActively exploited
Windows SmartScreen Security Feature Bypass Vulnerability. Details are not provided in the description.
- CVE-2026-85851High
Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.
- CVE-2026-83504Medium
A time-of-check time-of-use (TOCTOU) race condition vulnerability exists in Windows SmartScreen. An authorized attacker can exploit this to disclose information locally.
- CVE-2026-70051High
A type confusion vulnerability exists in Windows SmartScreen. An authorized attacker can exploit this flaw to elevate privileges locally.
- CVE-2026-62879Medium
Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally.
- CVE-2026-108463High
Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.
Original NVD description (English source)
Windows SmartScreen Security Feature Bypass Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS