Unrated severityNVD Advisory· Published Nov 14, 2018· Updated Aug 5, 2024

CVE-2018-8417

Description

A security feature bypass vulnerability exists in Microsoft JScript that could allow an attacker to bypass Device Guard, aka "Microsoft JScript Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.

Affected products

Microsoft/Jscriptllm-fuzzy
Microsoft/Windows 10 1909cpe-rescue
Range: 32-bit Systems
Microsoft/Windows Server 2003cpe-rescue
Range: version 1709 (Server Core Installation)
Microsoft/Windows Server 2016cpe-rescue
Range: (Server Core installation)
Microsoft/Windows Server 2019cpe-rescue
Range: (Server Core installation)

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/105795mitrevdb-entryx_refsource_BID
www.securitytracker.com/id/1042120mitrevdb-entryx_refsource_SECTRACK
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8417mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000