7.8high
CVE-2019-07321 exploit
A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly hand…
Published 7 y ago · modified 4 mo ago · JSON
CVSS
7.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
3.8%
percentile 90%
Public exploits
1
Exploit-DB
Summary
A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Security Feature Bypass Vulnerability'.
Exploit prediction (EPSS)
3.78% probability of exploitation in the next 30 days, higher than 90% of all scored CVEs.
Exploits and detections
- EDB-46716 Microsoft Windows 10 1809 - LUAFV NtSetCachedSigningLevel Device Guard Bypass · local · 2019-04-16
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 7.8 | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 4.6 | AV:L/AC:L/Au:N/C:P/I:P/A:P |
Affected products
- Microsoft Windows
- Microsoft Windows Server
Classification
- Weakness
- CWE-863 Incorrect Authorization
References
- portal.msrc.microsoft.com /en-US/security-guidance/advisory/CVE-2019-0732 · x_refsource_MISC, x_transferred
- exploit-db.com /exploits/46716/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
- packetstormsecurity.com /files/152536/Microsoft-Windows-LUAFV-NtSetCachedSigningLevel-Device-Guard-Bypass.html · x_refsource_MISC, x_transferred
Sources
- CVE List: CVE-2019-0732
- NVD: CVE-2019-0732
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.