PT-2019-1811

CVE-2019-0732

·

تاريخ النشر

2019-04-09

·

تاريخ التحديث

2020-08-24

الوصف من

CVSS 3.1
7.8
عالية
المقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Windows (affected versions not specified)
Description The issue is related to the improper handling of calls to the LUAFV driver (luafv.sys) in the Windows operating system. This can be exploited by an attacker to bypass the user-mode code integrity policy (UMCI) using a specially crafted application. It is also described as a security feature bypass vulnerability that could allow an attacker to bypass Device Guard.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾