Windows Security Feature Bypass in Microsoft Products
CVE-2019-0632

7.8HIGH

Key Information:

Vendor

Microsoft
Status
Windows
Windows Server
Powershell Core
Vendor
CVE Published:
5 March 2019

What is CVE-2019-0632?

A vulnerability exists in Microsoft Windows that allows attackers to bypass the Device Guard security feature. This flaw can potentially enable unauthorized access to sensitive system resources, compromising the integrity and security of a machine running affected versions of Windows. It is crucial for users to apply the relevant patches provided by Microsoft to mitigate any risks associated with this vulnerability.

Affected Version(s)

PowerShell Core 6.1

PowerShell Core 6.2

Windows 10 for 32-bit Systems

References

https://portal.msrc.microsoft.com/en-US/security-guidance...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/106880
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.