CVE-2019-0732: High severity windows 10 vulnerability
Published Apr 9, 2019
·Updated
A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Security Feature Bypass Vulnerability'.
Affected Software
18 affected components
Microsoft Windows 10
Microsoft Windows 10=1607
Microsoft Windows 10=1703
Microsoft Windows 10=1709
Microsoft Windows 10=1803
Microsoft Windows 10=1809
Microsoft Windows 7=sp1
Microsoft Windows 8.1
Microsoft Windows RT 8.1
Microsoft Windows Server 2008=sp2
Microsoft Windows Server 2008=r2-sp1
Microsoft Windows Server 2008=r2-sp1
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016
Microsoft Windows Server 2016=1709
Microsoft Windows Server 2016=1803
Microsoft Windows Server 2019
Remediation
Event History
Apr 9, 2019
CVE Published
via MITRE·08:15 PM
Data Sourced
via MITRE·08:15 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-0732?
CVE-2019-0732 has been rated as a medium severity vulnerability.
2
How do I fix CVE-2019-0732?
To fix CVE-2019-0732, ensure that your Windows software is updated with the latest security patches provided by Microsoft.
3
Which versions of Windows are affected by CVE-2019-0732?
CVE-2019-0732 affects various versions of Windows including Windows 7, 8.1, 10, and several versions of Windows Server.
4
What type of vulnerability is CVE-2019-0732?
CVE-2019-0732 is classified as a security feature bypass vulnerability.
5
Can exploitation of CVE-2019-0732 lead to unauthorized access?
Yes, exploitation of CVE-2019-0732 could allow an attacker to bypass Device Guard, potentially leading to unauthorized access.