CVE-2018-1035

medium

Description

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security Feature Bypass Vulnerability." This affects Windows 10, Windows 10 Servers.

References

http://www.securityfocus.com/bid/103927

http://www.securitytracker.com/id/1040791

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1035

Details

Source: MITRE

Published: 2018-04-19

Updated: 2019-10-03

Risk Information

CVSS v2

Base Score: 4.6

Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Impact Score: 6.4

Exploitability Score: 3.9

Severity: MEDIUM

CVSS v3

Base Score: 5.3

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Impact Score: 3.4

Exploitability Score: 1.8

Severity: MEDIUM