Microsoft disclosed SmartScreen and Office security feature bypass flaws

Microsoft published advisories for multiple security feature bypass vulnerabilities affecting Windows and Office components, including CVE-2023-36025 in Windows SmartScreen, CVE-2023-36413 in Microsoft Office, CVE-2023-21715 in Microsoft Publisher, and CVE-2026-21514 in Microsoft Word. The flaws were categorized as bypass issues rather than direct remote code execution bugs, indicating attackers could evade built-in protections intended to warn users or restrict unsafe content.

The disclosures show a recurring pattern across Microsoft products in which trust and warning mechanisms can be circumvented, potentially increasing the success of phishing, malicious document delivery, and other social-engineering attacks. Organizations relying on SmartScreen and Office security controls should review the relevant Microsoft Security Update Guide entries for affected products and ensure patches are applied to reduce the risk of users opening files or content that bypass normal safeguards.