CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-11-14
Windows SmartScreen Security Feature Bypass and Remote Code Execution Vulnerability (CVE-2023-36025) Analysis & Mitigation Guide
[Affected Scope] All supported versions of Windows 10, Windows 11, and Windows Server
[Impact] Attackers can completely bypass Windows SmartScreen warnings and Mark of the Web (MotW) protections via crafted internet shortcut (.url) files, leading to silent malicious code execution
[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict the execution of untrusted .url and .lnk files from external sources