CVE-2023-36025Vulnerability

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on 14 Nov 2023.

Reported by 1 independent source · first reported 28 Oct 2024 by Elastic Security Labs · last reported 28 Oct 2024

Last reported 23 months ago

CISA KEVAdded 14 Nov 2023
Fix due 5 Dec 2023
Used by ransomware: not knownCISA KEV catalogue

EPSS88.1%
higher than 99% of CVEsFIRST EPSS, as of 20 Oct 2026

What the reports say

1 report, newest first · the exact sentence from each

“This open-source stealer caught the world’s attention earlier in the year through its usage of a Windows SmartScreen vulnerability (CVE-2023-36025).”

Elastic Security LabsVendor28 Oct 2024
Katz and Mouse Game: MaaS Infostealers Adapt to Patched Chrome Defenses

Indicators reported together

named in the same reports

logs-system[.]securityin 1 report
27e4a3627d7df2b2…8fadb66cf23din 1 report
08d9d4e6489dc5b0…d094eac6cb37in 1 report
43cb70d31daa43d2…80cf710f9b1din 1 report
84033def9ffa70c7…fd8474fb8176in 1 report
b74733d68e95220a…1e465ba9299bin 1 report
hxxps://developer.chrome[.]com/release-notes/127in 1 report
hxxps://security.googleblog[.]com/2024/07/improving-security-of-chrome-cookies-on.htmlin 1 report

Copy these 8 indicators · defanged

8 indicators, defanged, one per line

logs-system[.]security
27e4a3627d7df2b22189dd4bebc559ae1986d49a8f4e35980b428fadb66cf23d
08d9d4e6489dc5b05a6caa434fc36ad6c1bd8c8eb08888f61cbed094eac6cb37
43cb70d31daa43d24e5b063f4309281753176698ad2aba9c557d80cf710f9b1d
84033def9ffa70c7b77ce9a7f6008600c0145c28fe5ea0e56dfafd8474fb8176
b74733d68e95220ab0630a68ddf973b0c959fd421628e639c1b91e465ba9299b
hxxps://developer.chrome[.]com/release-notes/127
hxxps://security.googleblog[.]com/2024/07/improving-security-of-chrome-cookies-on.html

Thanks — we review every report.

Report a wrong value