CVE-2018-8449

Опубликовано: 13 сент. 2018

Источник: nvd

CVSS3: 3.3

CVSS2: 2.1

EPSS Низкий

Описание

A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.

Ссылки

http://www.securityfocus.com/bid/105272
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041642
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8449
Patch
Vendor Advisory
https://www.exploit-db.com/exploits/45435/
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/105272
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041642
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8449
Patch
Vendor Advisory
https://www.exploit-db.com/exploits/45435/
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.01133

Низкий

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-367

Связанные уязвимости

CVE-2018-8449

CVSS3: 5.3

msrc

почти 7 лет назад

Device Guard Security Feature Bypass Vulnerability

GHSA-pf35-ch3j-qpg8