CVE-2018-1039

Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework versions 2.0 through 4.7.1

Description: A security feature bypass issue exists that could allow an attacker to bypass Device Guard. This could enable an attacker to circumvent a User Mode Code Integrity (UMCI) policy on the machine. To exploit this issue, an attacker would first have to access the local machine.

Recommendations: For Microsoft .NET Framework versions 2.0 through 4.7.1, update to a version that includes the fix for this security feature bypass issue to prevent attackers from bypassing Device Guard.