Vulnerability Details : CVE-2018-1035
A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security Feature Bypass Vulnerability." This affects Windows 10, Windows 10 Servers.
Products affected by CVE-2018-1035
- cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2018-1035
0.42%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 59 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2018-1035
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.6
|
MEDIUM | AV:L/AC:L/Au:N/C:P/I:P/A:P |
3.9
|
6.4
|
NIST | |
|
5.3
|
MEDIUM | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
1.8
|
3.4
|
NIST |
References for CVE-2018-1035
-
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1035
CVE-2018-1035 | Windows Security Feature Bypass VulnerabilityPatch;Vendor Advisory
-
http://www.securitytracker.com/id/1040791
Microsoft Windows Device Guard UMCI Validation Flaw Lets Local Users Bypass Security Restrictions - SecurityTrackerThird Party Advisory;VDB Entry
-
http://www.securityfocus.com/bid/103927
Microsoft Windows Device Guard CVE-2018-1035 Local Security Bypass VulnerabilityThird Party Advisory;VDB Entry
Jump to