Windows SmartScreen Security Feature Bypass Vulnerability

Summary

Microsoft Windows systems that include the SmartScreen feature are affected by this vulnerability, which allows an attacker to bypass SmartScreen's security checks. A successful bypass could let potentially malicious files or applications run without the warnings SmartScreen normally provides.

Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.

Timeline

1. Dec 13, 2022, 12:00 AM UTCCVE published
2. Dec 13, 2022Added to CISA KEV

   CISA has evidence of exploitation in the wild

3. Jan 3, 2023CISA remediation deadline

   Due date for US federal agencies to patch

4. Jan 12, 2026, 9:17 PM UTCRecord last updated
5. Oct 22, 2026EPSS reached 10%

   FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

• Microsoft Windows 10 Version 1809

  From 10.0.17763.0 · fixed in 10.0.17763.3770

• Microsoft Windows 10 Version 1809

  From 10.0.0 · fixed in 10.0.17763.3770

• Microsoft Windows Server 2019

  From 10.0.17763.0 · fixed in 10.0.17763.3770

• Microsoft Windows 10 Version 21H1

  From 10.0.0 · fixed in 10.0.19043.2364

• Microsoft Windows Server 2022

  From 10.0.20348.0 · fixed in 10.0.20348.1366

• Microsoft Windows 10 Version 20H2

  From 10.0.0 · fixed in 10.0.19042.2364

• Microsoft Windows 11 version 21H2

  From 10.0.22000.0 · fixed in 10.0.22000.1335

• Microsoft Windows 10 Version 21H2

  From 10.0.19044.0 · fixed in 10.0.19044.2364

• Microsoft Windows 10 Version 22H2

  From 10.0.19045.0 · fixed in 10.0.19045.2364

• Microsoft Windows 10 Version 1607

  From 10.0.14393.0 · fixed in 10.0.14393.5582

• Microsoft Windows Server 2016

  From 10.0.14393.0 · fixed in 10.0.14393.5582

References 1