Microsoft Windows: 3 exploited vulnerabilities (CVE-2023-32046, CVE-2023-32049, CVE-2023-36874)

Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for privilege escalation. Microsoft Windows Defender SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the Open File - Security Warning prompt. Microsoft Windows Error Reporting Service contains an unspecified vulnerability that allows for privilege escalation. Added to CISA KEV on 2023-07-11.

Why this severity: CVSS 8.8 (NVD), actively exploited (CISA KEV)

Started

Jul 11, 2023

Closed

Jul 11, 2023

CVEs

CVE-2023-32046CVE-2023-32049CVE-2023-36874

• Microsoft
• Windows
• CISA KEV
• #Privilege escalation

Notes & caveats

Derived from CISA KEV JSON feed catalogVersion 2026.10.21. Exact affected/fixed version strings are not always in the KEV record — verify against the vendor advisory URL. startedAt uses dateAdded (exploitation may have begun earlier). Grouped: same vendor/product added to KEV on the same day.