CVE-2018-0827 — Corporation Windows Scripting Host vulnerability

5 documents4 sources

Severity

5.3MEDIUMNVD

EPSS

2.2%

top 15.41%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Microsoft Corporation Windows Scripting Host Microsoft Windows 10 Microsoft Windows Server 2016 +5 more

Timeline

PublishedFeb 15

Latest updateMay 13

Description

Windows Scripting Host (WSH) in Windows 10 versions 1703 and 1709 and Windows Server, version 1709 allows a Device Guard security feature bypass vulnerability due to the way objects are handled in memory, aka "Windows Security Feature Bypass Vulnerability".

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LExploitability: 1.8 | Impact: 3.4

Affected Packages8 packages

▶msrcmsrc/windows_server_version_1709

▶msrcmsrc/windows_10_version_1709_for_32-bit_systems

▶msrcmsrc/windows_10_version_1709_for_x64-based_systems

▶CVEListV5microsoft_corporation/windows_scripting_hostWindows 10 versions 1703 and 1709 and Windows Server, version 1709

▶msrcmsrc/windows_10_version_1703_for_32-bit_systems

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

GHSA

GHSA-hwwx-9pq5-8p52: Windows Scripting Host (WSH) in Windows 10 versions 1703 and 1709 and Windows Server, version 1709 allows a Device Guard security feature bypass vulne↗2022-05-13

▶

📋Vendor Advisories

Microsoft

Windows Security Feature Bypass Vulnerability↗2018-02-13

▶

🕵️Threat Intelligence

Talos

Microsoft Patch Tuesday - February 2018↗2018-02-13

▶

Talos

Microsoft Patch Tuesday - February 2018↗2018-02-13

▶