First published: Thu Feb 15 2018(Updated: )
Windows Scripting Host (WSH) in Windows 10 versions 1703 and 1709 and Windows Server, version 1709 allows a Device Guard security feature bypass vulnerability due to the way objects are handled in memory, aka "Windows Security Feature Bypass Vulnerability".
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Windows 10 | =1703 | |
Microsoft Windows 10 | =1709 | |
Microsoft Windows Server 2016 | =1709 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-0827 has a severity rating of Medium as it allows for a security feature bypass in Windows Scripting Host.
To mitigate CVE-2018-0827, it is recommended to update your Windows 10 or Windows Server installation to the latest security patches provided by Microsoft.
CVE-2018-0827 affects Windows 10 versions 1703 and 1709, as well as Windows Server version 1709.
The primary impact of CVE-2018-0827 is that it allows a bypass of the Device Guard security feature in Windows.
Yes, if exploited, CVE-2018-0827 could potentially allow attackers to execute arbitrary code by bypassing security features.