Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-8212

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integ

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
microsoft

Description

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8201, CVE-2018-8211, CVE-2018-8215, CVE-2018-8216, CVE-2018-8217, CVE-2018-8221.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Windows Server 2016

  • (Server Core installation)affected

Microsoft Windows 10

  • 32-bit Systemsaffected
  • Version 1607 for 32-bit Systemsaffected
  • Version 1607 for x64-based Systemsaffected
  • Version 1703 for 32-bit Systemsaffected
  • Version 1703 for x64-based Systemsaffected
  • Version 1709 for 32-bit Systemsaffected
  • Version 1709 for x64-based Systemsaffected
  • Version 1803 for 32-bit Systemsaffected
  • Version 1803 for x64-based Systemsaffected
  • x64-based Systemsaffected

Microsoft Windows 10 Servers

  • version 1709 (Server Core Installation)affected
  • version 1803 (Server Core Installation)affected

References