Windows File Signature Security Feature Bypass Vulnerability
A security feature bypass exists when Windows incorrectly validates CAB file signatures. An attacker who successfully exploited this vulnerability could inject code into a CAB file without invalidating the file's signature.
To exploit the vulnerability, an attacker could modify a signed CAB file and inject malicious code. The attacker could then convince a target user to execute the file.
The update addresses the vulnerability by correcting how Windows validates file signatures.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Windows 10 Version 1703
Vendor
Microsoft
Product
Windows 10 Version 1703
Platforms
32-bit Systems
x64-based Systems
Default status
Unknown
Windows 10 Version 1703 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0.0
affected
custom
publication
Unavailable
None listed
Windows 10 Version 1803
Vendor
Microsoft
Product
Windows 10 Version 1803
Platforms
32-bit Systems
x64-based Systems
ARM64-based Systems
Default status
Unknown
Windows 10 Version 1803 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0.0
affected
custom
publication
Unavailable
None listed
Windows Server, version 1803 (Server Core Installation)
Vendor
Microsoft
Product
Windows Server, version 1803 (Server Core Installation)
Platforms
x64-based Systems
Default status
Unknown
Windows Server, version 1803 (Server Core Installation) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0.0
affected
custom
publication
Unavailable
None listed
Windows 10 Version 1809
Vendor
Microsoft
Product
Windows 10 Version 1809
Platforms
32-bit Systems
x64-based Systems
ARM64-based Systems
Default status
Unknown
Windows 10 Version 1809 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0.0
affected
custom
publication
Unavailable
None listed
Windows Server 2019
Vendor
Microsoft
Product
Windows Server 2019
Platforms
x64-based Systems
Default status
Unknown
Windows Server 2019 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0.0
affected
custom
publication
Unavailable
None listed
Windows Server 2019 (Server Core installation)
Vendor
Microsoft
Product
Windows Server 2019 (Server Core installation)
Platforms
x64-based Systems
Default status
Unknown
Windows Server 2019 (Server Core installation) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0.0
affected
custom
publication
Unavailable
None listed
Windows 10 Version 1709 for 32-bit Systems
Vendor
Microsoft
Product
Windows 10 Version 1709 for 32-bit Systems
Platforms
32-bit Systems
Default status
Unknown
Windows 10 Version 1709 for 32-bit Systems · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0.0
affected
custom
publication
Unavailable
None listed
Windows 10 Version 1709
Vendor
Microsoft
Product
Windows 10 Version 1709
Platforms
x64-based Systems
ARM64-based Systems
Default status
Unknown
Windows 10 Version 1709 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0.0
affected
custom
publication
Unavailable
None listed
Windows 10 Version 1903 for 32-bit Systems
Vendor
Microsoft
Product
Windows 10 Version 1903 for 32-bit Systems
Platforms
Unknown
Default status
Unknown
Windows 10 Version 1903 for 32-bit Systems · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0.0
affected
custom
publication
Unavailable
None listed
Windows 10 Version 1903 for x64-based Systems
Vendor
Microsoft
Product
Windows 10 Version 1903 for x64-based Systems
Platforms
Unknown
Default status
Unknown
Windows 10 Version 1903 for x64-based Systems · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0.0
affected
custom
publication
Unavailable
None listed
Windows 10 Version 1903 for ARM64-based Systems
Vendor
Microsoft
Product
Windows 10 Version 1903 for ARM64-based Systems
Platforms
Unknown
Default status
Unknown
Windows 10 Version 1903 for ARM64-based Systems · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0.0
affected
custom
publication
Unavailable
None listed
Windows Server, version 1903 (Server Core installation)
Vendor
Microsoft
Product
Windows Server, version 1903 (Server Core installation)
Platforms
x64-based Systems
Default status
Unknown
Windows Server, version 1903 (Server Core installation) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0.0
affected
custom
publication
Unavailable
None listed
Windows 10 Version 1507
Vendor
Microsoft
Product
Windows 10 Version 1507
Platforms
32-bit Systems
x64-based Systems
Default status
Unknown
Windows 10 Version 1507 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0.0
affected
custom
publication
Unavailable
None listed
Windows 10 Version 1607
Vendor
Microsoft
Product
Windows 10 Version 1607
Platforms
32-bit Systems
x64-based Systems
Default status
Unknown
Windows 10 Version 1607 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0.0
affected
custom
publication
Unavailable
None listed
Windows Server 2016
Vendor
Microsoft
Product
Windows Server 2016
Platforms
x64-based Systems
Default status
Unknown
Windows Server 2016 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.0.0
affected
custom
publication
Unavailable
None listed
Windows Server 2016 (Server Core installation)
Vendor
Microsoft
Product
Windows Server 2016 (Server Core installation)
Platforms
x64-based Systems
Default status
Unknown
Windows Server 2016 (Server Core installation) · Scoped product and version facts