Windows SmartScreen Security Feature Bypass Vulnerability

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Oct 13, 2026 · CIRCL Vulnerability Lookup

   Detected

   Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.

2. Oct 14, 2026 · CIRCL Vulnerability Lookup

   Updated

   Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.

3. Oct 16, 2026 · NIST NVD

   Updated

   Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.

Affected

• microsoft Windows 11 Version 24H2 for ARM64-based Systemsversion unspecified
• microsoft Windows 11 Version 24H2 for x64-based Systemsversion unspecified
• microsoft Windows 11 Version 25H2 for ARM64-based Systemsversion unspecified
• microsoft Windows 11 Version 25H2 for x64-based Systemsversion unspecified
• microsoft Windows 11 Version 26H1 for ARM64-based Systemsversion unspecified
• microsoft Windows 11 Version 26H2 for ARM64-based Systemsversion unspecified
• microsoft Windows 11 Version 26H2 for x64-based Systemsversion unspecified
• microsoft Windows 11 version 26H1 for x64-based Systemsversion unspecified
• vendor Microsoft Windows 11 Version 24H2version unspecified
• vendor Microsoft Windows 11 Version 25H2version unspecified
• vendor Microsoft Windows 11 Version 26H2version unspecified
• vendor Microsoft Windows 11 version 26H1version unspecified

Sources

• CIRCL Vulnerability LookupVulnerability recordCVE-2026-108463

  Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.

  vulnerability.circl.lu
• CVE.orgVulnerability recordCVE-2026-108463

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2026-108463

  30-day exploitation probability 0.9%

  first.org
• Microsoft Security Update GuideVendor advisoryCVE-2026-108463

  Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems

  msrc.microsoft.com
• NIST NVDVulnerability recordCVE-2026-108463

  Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.

  nvd.nist.gov

References

• Windows SmartScreen Security Feature Bypass Vulnerability · msrc.microsoft.com