What is CVE-2023-36025?

CVE-2023-36025 is a high-severity vulnerability affecting Microsoft Windows operating systems and server versions, including Windows 10, Windows 11, and various Windows Server editions. This security flaw allows attackers to bypass Windows Defender SmartScreen checks and their associated prompts, potentially leading to unauthorized access and data breaches. The vulnerability impacts a wide range of systems, including those running on x86, x64, and ARM64 architectures. It is crucial for organizations to address this issue to maintain the security of their systems and protect sensitive information.

Who is impacted?

The CVE-2023-36025 vulnerability affects users of Microsoft Windows operating systems, including various versions of Windows 10, Windows 11, and Windows Server. This security flaw can potentially lead to unauthorized access and data breaches. It impacts a wide range of systems, such as those running on x86, x64, and ARM64 architectures. Users should be aware of this vulnerability to maintain the security of their systems and protect sensitive information.

What to do if CVE-2023-36025 affected you

If you're affected by the CVE-2023-36025 vulnerability, it's important to take action to protect your systems. To address this issue, follow these steps:

1. Apply the security updates provided by Microsoft for the affected products and platforms.

2. Ensure that your systems are running the latest software versions and security patches.

3. Update your internal vulnerability management procedures and establish a process for ongoing remediation of vulnerabilities.

4. Assign roles and responsibilities for executing agency actions and define necessary actions required to enable prompt response to directives.

5. Establish internal validation and enforcement procedures to ensure adherence with directives and set internal tracking and reporting requirements to evaluate adherence and provide reporting to CISA, as needed.

Is it in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2023-36025 vulnerability, also known as Microsoft Windows SmartScreen Security Feature Bypass Vulnerability, is indeed listed in CISA's Known Exploited Vulnerabilities Catalog. It was added on November 14, 2023, and the due date for addressing the issue is December 5, 2023. The required action is to apply mitigations as per vendor instructions or discontinue the use of the affected product if mitigations are unavailable.

Weakness Enumeration

The weakness enumeration for CVE-2023-36025 is Insufficient Information, indicating a lack of specific details about the vulnerability and its mitigation.

Learn More

CVE-2023-36025 is a significant security vulnerability affecting various Microsoft Windows operating systems and server versions. To better understand its impact and mitigation strategies, refer to the NVD page and the sources listed below.

• Microsoft Security Update Guide

• CISA Binding Operational Directive 22-01

• CISA Known Exploited Vulnerabilities Catalog