What is CVE-2023-32049?

CVE-2023-32049 is a high-severity vulnerability affecting the Windows SmartScreen security feature, which could allow an attacker to bypass the Open File - Security Warning prompt. This vulnerability impacts various versions of Microsoft Windows 10, Windows 11, and Windows Server. It is important for users and administrators of these systems to be aware of this issue and apply necessary security updates to mitigate the risk.

Who is impacted by this?

If you use Microsoft Windows 10, Windows 11, or Windows Server, you might be affected by the CVE-2023-32049 vulnerability. Windows Server 2016, 2019, and 2022 are also affected. The vulnerability is related to the Windows SmartScreen security feature, which could be bypassed by an attacker, potentially putting your system at risk.

What should I do if I’m affected?

If you're affected by the CVE-2023-32049 vulnerability, it's crucial to take action to protect your system. Follow these simple steps to mitigate the risk:

1. Apply the security updates provided by Microsoft for the affected software versions. See the Microsoft Security Update Guide for more information.

2. Keep your software up-to-date with the latest patches and updates.

3. Be cautious when clicking on unknown URLs and avoid downloading files from untrusted sources.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

Yes, the CVE-2023-32049 vulnerability is in CISA's Known Exploited Vulnerabilities Catalog. It is named "Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability" and was added on July 11, 2023. The due date for required action is August 1, 2023.

Weakness Enumeration

The weakness enumeration for this vulnerability is "Insufficient Information," indicating a lack of specific details about the vulnerability and its mitigation.

Learn More

For a comprehensive understanding of this vulnerability, including its description, severity, technical details, and known affected software configurations, refer to the NVD page or the sources listed below.

• Microsoft Security Update Guide

• BOD 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities | CISA

• Known Exploited Vulnerabilities Catalog