CVE-2018-8435HighCVSS 4.2

Windows Hyper-V Security Feature Bypass Vulnerability

Published
September 11, 2018
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2018-8435 →

📋 Description

A security feature bypass vulnerability exists when Windows Hyper-V BIOS loader fails to provide a high-entropy source. To exploit this vulnerability, an attacker would need to reboot a guest virtual machine numerous times until the vulnerability is triggered. The security update addresses the vulnerability by correcting security feature behavior to ensure Windows Hyper-V BIOS loader provides a high-entropy source.

🎯 Affected products9

  • Windows 10 Version 1607 for x64-based Systems
  • Windows 10 Version 1703 for x64-based Systems
  • Windows 10 Version 1709 for x64-based Systems
  • Windows 10 Version 1803 for x64-based Systems
  • Windows 10 for x64-based Systems
  • Windows Server 2016
  • Windows Server 2016 (Server Core installation)
  • Windows Server, version 1709 (Server Core Installation)
  • Windows Server, version 1803 (Server Core Installation)

✅ Remediation

KB4457128 (Security Update) KB4457138 (Security Update) KB4457142 (Security Update) KB4457132 (Security Update) KB4457131 (Security Update)

🔗 References (6)