← back
CVE-2018-0890

CVE-2018-0890

EPSS 4.3%
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 4.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
12 Apr 2018Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A security feature bypass vulnerability exists when Active Directory incorrectly applies Network Isolation settings, aka "Active Directory Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.
Affected products
Microsoft · Windows 10Microsoft · Windows 10 ServersMicrosoft · Windows Server 2016
References
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0890http://www.securityfocus.com/bid/103649http://www.securitytracker.com/id/1040663