CVE-2018-8211

Summary

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows 10 Servers, Windows 10. This CVE ID is unique from CVE-2018-8201, CVE-2018-8212, CVE-2018-8215, CVE-2018-8216, CVE-2018-8217, CVE-2018-8221.

Affected Software

VendorProductVersion RangeStatus
MicrosoftWindows 10 Serversversion 1709 (Server Core Installation)affected
MicrosoftWindows 10 Serversversion 1803 (Server Core Installation)affected
MicrosoftWindows 10Version 1607 for 32-bit Systemsaffected
MicrosoftWindows 10Version 1607 for x64-based Systemsaffected
MicrosoftWindows 10Version 1703 for 32-bit Systemsaffected
MicrosoftWindows 10Version 1703 for x64-based Systemsaffected
MicrosoftWindows 10Version 1709 for 32-bit Systemsaffected
MicrosoftWindows 10Version 1709 for x64-based Systemsaffected
MicrosoftWindows 10Version 1803 for 32-bit Systemsaffected
MicrosoftWindows 10Version 1803 for x64-based Systemsaffected

Weaknesses

  • Security Feature Bypass

ADP Enrichment

CVE Program Container

Additional References

References