CVE-2019-1167: Medium severity powershell core vulnerability

Published Jul 19, 2019

Updated

A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement, aka 'Windows Defender Application Control Security Feature Bypass Vulnerability'.

Affected Software

2 affected components

Microsoft PowerShell Core=6.1

Microsoft PowerShell Core=6.2

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1167

Event History

Jul 19, 2019

CVE Published

via MITRE·02:34 PM

Data Sourced

via MITRE·02:34 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2019-1167?

CVE-2019-1167 is a security feature bypass vulnerability in Windows Defender Application Control (WDAC) that could allow an attacker to bypass WDAC enforcement.

How severe is CVE-2019-1167?

CVE-2019-1167 has a severity score of 4.1 out of 10, indicating a medium severity.

Which software versions are affected by CVE-2019-1167?

CVE-2019-1167 affects Microsoft PowerShell Core versions 6.1 and 6.2.

How can an attacker exploit CVE-2019-1167?

This vulnerability could allow an attacker to bypass WDAC enforcement.

Where can I find more information about CVE-2019-1167?

You can find more information about CVE-2019-1167 at the following reference: [Microsoft Security Guidance Advisory](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1167)