CVE-2018-8549 — Microsoft Windows 10 vulnerability

3 documents3 sources
Severity
5.5MEDIUMNVD
EPSS
0.3%
top 47.74%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
17
Microsoft Windows 10Microsoft Windows Server 2012Microsoft Windows Server 2016+14 more
Timeline
PublishedNov 14
Latest updateMay 13

Description

A security feature bypass exists when Windows incorrectly validates kernel driver signatures, aka "Windows Security Feature Bypass Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages16 packages

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-77p5-fw87-rhq4: A security feature bypass exists when Windows incorrectly validates kernel driver signatures, aka "Windows Security Feature Bypass Vulnerability↗2022-05-13
▶

📋Vendor Advisories

1
Microsoft
Windows Security Feature Bypass Vulnerability↗2018-11-13
▶