EXPOSURES › CVE-2023-32049
CVE-2023-32049
HIGH ⌖ ON CISA KEV · EXPLOITEDA Microsoft Windows Defender SmartScreen bypass allows attackers to circumvent security warnings when opening files, actively exploited in the wild.
This vulnerability allows attackers to bypass Windows Defender SmartScreen's file security warnings, potentially leading to malware execution and data compromise. DIB organizations using Windows must promptly patch to prevent exploitation and maintain CMMC/NIST 800-171 compliance. Verify patching status and consider enhanced endpoint detection and response.
Shame score — A core security feature bypass, actively exploited, reflects a significant oversight in Microsoft's security design and implementation.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft Windows Defender SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the Open File - Security Warning prompt.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |