CVE-2018-0902: High severity windows 10 vulnerability

Published Mar 14, 2018

Updated

The Cryptography Next Generation (CNG) kernel-mode driver (cng.sys) in Windows 10 Gold, 1511, 1607, 1703, and 1709. Windows Server 2016 and Windows Server, version 1709 allows a security feature bypass vulnerability due to the way the kernel-mode driver validates and enforces impersonation levels, aka "Windows Security Feature Bypass Vulnerability". This CVE is unique from CVE-2018-0884.

Affected Software

7 affected components

Microsoft Windows 10

Microsoft Windows 10=1511

Microsoft Windows 10=1607

Microsoft Windows 10=1703

Microsoft Windows 10=1709

Microsoft Windows Server=1709

Microsoft Windows Server 2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0902

Event History

Mar 14, 2018

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-0902?

CVE-2018-0902 is rated as a security feature bypass vulnerability.

How do I fix CVE-2018-0902?

To fix CVE-2018-0902, install the latest security updates provided by Microsoft for affected versions of Windows.

Which versions of Windows are affected by CVE-2018-0902?

CVE-2018-0902 affects Windows 10 versions 1511, 1607, 1703, 1709, and Windows Server 2016 and version 1709.

What are the potential impacts of exploiting CVE-2018-0902?

Exploitation of CVE-2018-0902 may allow attackers to bypass security checks and impersonate higher privilege levels.

Is CVE-2018-0902 remotely exploitable?

CVE-2018-0902 is not considered remotely exploitable as it requires local access for exploitation.