Windows Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard. An attacker who successfully exploited this vulnerability could circumvent a User Mode Code Integrity UMCI policy on the machine. To exploit the vulnerability, an attacker would first...

Windows Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Windows Scripting Host which could allow an attacker to bypass Device Guard. An attacker who successfully exploited this vulnerability could circumvent a User Mode Code Integrity UMCI policy on the machine. To exploit the vulnerability, an attacke...

PT-2018-18450

Name of the Vulnerable Software and Affected Versions Internet Explorer 11 Description A security feature bypass issue exists due to Internet Explorer's failure to validate User Mode Code Integrity UMCI policies. This could allow an attacker to bypass Device Guard UMCI policies. Recommendations F...

PT-2018-18452

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A security-feature bypass issue allows attackers to affect the system. No additional details are provided about the nature of the issue, potential impacts, or the scope of affected devices...

PT-2018-18440

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: A security feature bypass issue exists due to Microsoft Edge's improper handling of requests from different origins. This allows the browser to bypass Same-Origin Policy SOP...

PT-2018-18453

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A security-feature bypass issue allows attackers to affect the system. No additional details are provided about the nature of the issue, potential impacts, or the scope of affected devices...

PT-2018-9108

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A security-feature bypass issue allows attackers to affect the system. No additional details are provided about the nature of the issue, potential impacts, or the scope of affected devices...

PT-2018-18457

Name of the Vulnerable Software and Affected Versions Windows Server 2016 Windows 10 Windows 10 Servers Description A security feature bypass exists when Windows incorrectly validates kernel driver signatures. This issue allows attackers to affect the system. Recommendations For Windows Server...

PT-2018-9864

Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework versions 2.0 through 4.7.1 Description: A security feature bypass issue exists that could allow an attacker to bypass Device Guard. This could enable an attacker to circumvent a User Mode Code Integrity UMCI policy on...

PT-2018-9170

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A security-feature bypass issue allows attackers to affect the system. No additional details are provided about the nature of the issue, potential impacts, or the scope of affected devices...

KB4103723: Windows 10 Version 1607 and Windows Server 2016 May 2018 Security Update

The remote Windows host is missing security update 4103723. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists in .Net Framework which could allow an attacker to bypass Device Guard. An attacker who successfully exploited this vulnerability...

KLA11241 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerabili...

CVE-2018-1035: Undefined Security Weakness

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security Feature Bypass Vulnerability." This affects Windows 10, Windows 10 Servers...

Windows Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard. An attacker who successfully exploited this vulnerability could circumvent a User Mode Code Integrity UMCI policy on the machine. To exploit the vulnerability, an attacker would first...

PT-2018-9835

Name of the Vulnerable Software and Affected Versions: Windows 10 Windows 10 Servers Description: A security feature bypass issue exists, potentially allowing an attacker to bypass Device Guard. This could affect the system. Recommendations: For Windows 10 and Windows 10 Servers, at the moment,...

Microsoft Windows - 'CiSetFileCache' TOCTOU Incomplete Fix

Windows: CiSetFileCache TOCTOU CVE-2017-11830 Incomplete Fix Platform: Windows 10 1709 including Win10S Class: Security Feature Bypass Summary: The fix for CVE-2017-11830 is insufficient to prevent a normal user application adding a cached signing level to an unsigned file by exploiting a TOCTOU ...

CVE-2018-0966

A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

CVE-2018-0890

A security feature bypass vulnerability exists when Active Directory incorrectly applies Network Isolation settings, aka "Active Directory Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

Security feature bypass

A security feature bypass vulnerability exists in the Microsoft Wireless Keyboard 850 which could allow an attacker to reuse an AES encryption key to send keystrokes to other keyboard devices or to read keystrokes sent by other keyboards for the affected devices, aka "Microsoft Wireless Keyboard...

CVE-2018-8117

CVE-2018-8117 affects the Microsoft Wireless Keyboard 850, described as a security feature bypass where an attacker could reuse an AES encryption key to read keystrokes or inject keystrokes into other keyboards. The root cause, per Microsoft, is insufficient per-device keying, enabling an attacke...