Matt Nelson

**Name of the Vulnerable Software and Affected Versions** Electronic Arts Origin versions prior to 10.6 **Description** The issue allows for Elevation of Privilege. **Recommendations** For versions prior to 10.6, update to version 10.6 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Windows Server 2016 Windows 10 Windows 10 Servers **Description** A security feature bypass issue exists, allowing an attacker to inject malicious code into a Windows PowerShell session. This is related to an improperly implemented security check. The exploitation of this issue could enable a bypass of code integrity checks by injecting malicious code into a trusted PowerShell process. **Recommendations** For Windows Server 2016, Windows 10, and Windows 10 Servers, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows 10 versions 10 Gold, 1511, 1607, 1703, and 1709 Windows Server 2016 Windows Server, version 1709 Description: A security feature bypass issue exists due to the way the Cryptography Next Generation (CNG) kernel-mode driver (cng.sys) validates and enforces impersonation levels. This allows attackers to affect the system. Recommendations: For Windows 10 versions 10 Gold, 1511, 1607, 1703, and 1709: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For Windows Server 2016: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For Windows Server, version 1709: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Internet Explorer versions in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 **Description** A security issue exists due to Internet Explorer failing to validate User Mode Code Integrity (UMCI) policies, allowing an attacker to bypass Device Guard UMCI policies. **Recommendations** For Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016, update Internet Explorer to a version that properly validates UMCI policies to prevent bypassing Device Guard policies.

**Name of the Vulnerable Software and Affected Versions** The product name cannot be determined. **Description** A security-feature bypass issue allows attackers to affect the system. No additional details are provided about the nature of the issue, potential impacts, or the scope of affected devices. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.