Threat actors were actively exploiting CVE-2023-36025 in Windows SmartScreen as a zero-day vulnerability before Microsoft patched it in November.
Source: DarkReading
Source Link: https://www.darkreading.com/vulnerabilities-threats/exploit-critical-windows-defender-bypass-public