High severity7.8NVD Advisory· Published May 9, 2018· Updated Jun 17, 2026
CVE-2018-1039
CVE-2018-1039
Description
A security feature bypass vulnerability exists in .Net Framework which could allow an attacker to bypass Device Guard, aka ".NET Framework Device Guard Security Feature Bypass Vulnerability." This affects Microsoft .NET Framework 4.7.1, Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 4.7/4.7.1, Microsoft .NET Framework 3.0, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6.2/4.7/4.7.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1, Microsoft .NET Framework 2.0, Microsoft .NET Framework 4.6/4.6.1/4.6.2.
Affected products
2- Range: multiple versions (4.7.1, 4.6, 3.5, 4.7/4.7.1, 3.0, 3.5.1, 4.5.2, 4.6.2/4.7/4.7.1, 4.6/4.6.1/4.6.2/4.7/4.7.1, 2.0, 4.6/4.6.1/4.6.2)
- Range: 2.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2
Patches
Vulnerability mechanics
References
3- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1039nvdPatchVendor Advisory
- www.securityfocus.com/bid/104072nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1040851nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.