Microsoft Windows Hyper-V CVE-2018-8435 Security Feature Bypass Vulnerability

Description

A security feature bypass vulnerability exists when Windows Hyper-V BIOS loader fails to provide a high-entropy source. To exploit this vulnerability, an attacker would need to reboot a guest virtual machine numerous times until the vulnerability is triggered. The security update addresses the vulnerability by correcting security feature behavior to ensure Windows Hyper-V BIOS loader provides a high-entropy source.

Affected Applications

Windows 10
Windows Server 2016
Windows Server version 1803 (Server Core Installation)
Windows Server version 1709 (Server Core Installation)

CVE References

Other References