Matt Nelson

The issue allows for Elevation of Privilege.

A security feature bypass issue exists, allowing an attacker to inject malicious code into a Windows PowerShell session. This is related to an improperly implemented security check. The exploitation of this issue could enable a bypass of code integrity checks by injecting malicious code into a trusted PowerShell process.

Name of the Vulnerable Software and Affected Versions: Windows 10 versions 10 Gold, 1511, 1607, 1703, and 1709 Windows Server 2016 Windows Server, version 1709 Description: A security feature bypass issue exists due to the way the Cryptography Next Generation (CNG) kernel-mode driver (cng.sys) validates and enforces impersonation levels. This allows attackers to affect the system. Recommendations: For Windows 10 versions 10 Gold, 1511, 1607, 1703, and 1709: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For Windows Server 2016: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For Windows Server, version 1709: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

A security issue exists due to Internet Explorer failing to validate User Mode Code Integrity (UMCI) policies, allowing an attacker to bypass Device Guard UMCI policies.

A security-feature bypass issue allows attackers to affect the system. No additional details are provided about the nature of the issue, potential impacts, or the scope of affected devices.