CVE-2018-8126

Опубликовано: 08 мая 2018

Источник: msrc

CVSS3: 5.3

EPSS Низкий

Описание

Internet Explorer Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Internet Explorer fails to validate User Mode Code Integrity (UMCI) policies. The vulnerability could allow an attacker to bypass Device Guard UMCI policies.

To exploit the vulnerability, a user could either visit a malicious website or an attacker with access to the system could run a specially crafted application. An attacker could then leverage the vulnerability to run unsigned malicious code as though it were signed by a trusted source.

The update addresses the vulnerability by correcting how Internet Explorer validates UMCI policies.

Обновления

Продукт	Статья	Обновление
Internet Explorer 11 on Windows 10 Version 1803 for 32-bit Systems	4103721	Security Update
Internet Explorer 11 on Windows 10 Version 1803 for x64-based Systems	4103721	Security Update
Internet Explorer 11 on Windows 10 Version 1703 for 32-bit Systems	4103731	Security Update
Internet Explorer 11 on Windows 10 Version 1703 for x64-based Systems	4103731	Security Update
Internet Explorer 11 on Windows 10 Version 1709 for 32-bit Systems	4103727	Security Update
Internet Explorer 11 on Windows 10 Version 1709 for x64-based Systems	4103727	Security Update
Internet Explorer 11 on Windows 10 for 32-bit Systems	4103716	Security Update
Internet Explorer 11 on Windows 10 for x64-based Systems	4103716	Security Update
Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems	4103723	Security Update
Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems	4103723	Security Update

Показывать по

Возможность эксплуатации

Publicly Disclosed

Exploited

Latest Software Release

Exploitation Less Likely

Older Software Release

Exploitation Less Likely

EPSS

Процентиль: 93%

0.09901

Низкий

5.3 Medium

CVSS3

Связанные уязвимости

CVE-2018-8126

CVSS3: 8.8

nvd

больше 7 лет назад

A security feature bypass vulnerability exists when Internet Explorer fails to validate User Mode Code Integrity (UMCI) policies, aka "Internet Explorer Security Feature Bypass Vulnerability." This affects Internet Explorer 11.

GHSA-mv59-m2pm-94rh