3.3low
CVE-2018-84491 exploit
A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security Feature Bypass Vulne…
Published 8 y ago · modified 4 mo ago · JSON
CVSS
3.3
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
3.1%
percentile 88%
Public exploits
1
Exploit-DB
Summary
A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.
Exploit prediction (EPSS)
3.11% probability of exploitation in the next 30 days, higher than 88% of all scored CVEs.
Exploits and detections
- EDB-45435 Microsoft Windows - 'CiSetFileCache' WDAC Security Feature Bypass TOCTOU · dos · 2018-09-19
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 3.3 | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N |
| NVD | 2.0 | 2.1 | AV:L/AC:L/Au:N/C:N/I:P/A:N |
Affected products
- Microsoft Windows Server 2016
- Microsoft Windows 10
- Microsoft Windows 10 Servers
Classification
- Weakness
- CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition
References
- securitytracker.com /id/1041642 · vdb-entry, x_refsource_SECTRACK, x_transferred
- securityfocus.com /bid/105272 · vdb-entry, x_refsource_BID, x_transferred
- portal.msrc.microsoft.com /en-US/security-guidance/advisory/CVE-2018-8449 · x_refsource_CONFIRM, x_transferred
- exploit-db.com /exploits/45435/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
Sources
- CVE List: CVE-2018-8449
- NVD: CVE-2018-8449
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.