low3.3Public exploit code
CVE-2018-8449
A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security Feature Bypass Vulnerability." This affe…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Windows - 'CiSetFileCache' WDAC Security Feature Bypass TOCTOU2018-09-19 · dos · windows · Verified
Impact
A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 10 | All versions Versions 1607, 1703, 1709, 1803 |
| Microsoft | Windows Server 2016 | All versions Versions 1709, 1803 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/105272
- http://www.securitytracker.com/id/1041642
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8449
- https://www.exploit-db.com/exploits/45435/
- http://www.securityfocus.com/bid/105272
- http://www.securitytracker.com/id/1041642
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8449
- https://www.exploit-db.com/exploits/45435/