CVE-2025-59033 (CNNVD-202509-1078)
中文标题:
Microsoft Windows Defender Application Control 安全漏洞
英文标题:
The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control (W...
漏洞描述
中文描述:
Microsoft Windows Defender Application Control（WDAC）是美国微软（Microsoft）公司的一款安全工具，通过配置策略从软件层面限制程序运行，以减少黑客可以攻击的范围。 Microsoft Windows Defender Application Control存在安全漏洞，该漏洞源于策略实现不当，可能导致驱动程序阻止列表失效。
英文描述:
The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control (WDAC) policy. On systems that do not have hypervisor-protected code integrity (HVCI) enabled, entries that specify only the to-be-signed (TBS) part of the code signer certificate are properly blocked, but entries that specify the signing certificate’s TBS hash along with a 'FileAttribRef' qualifier (such as file name or version) will not be blocked. This vulnerability affects any Windows system that does not have HVCI enabled or supported (HVCI is available in Windows 10, Windows 11, and Windows Server 2016 and later). NOTE: The vendor states that the driver blocklist is intended for use with HVCI, while systems without HVCI should use App Control, and any custom blocklist entries require a granular approach for proper enforcement.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Microsoft | Windows | - | ≤ Server 2025 | - |
cpe:2.3:a:microsoft:windows:*:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
CVSS评分详情
3.1 (cna)
HIGHCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2025-59033 |
2025-11-11 15:23:31 | 2025-11-11 07:40:46 |
| NVD | nvd_CVE-2025-59033 |
2025-11-11 15:01:02 | 2025-11-11 07:48:33 |
| CNNVD | cnnvd_CNNVD-202509-1078 |
2025-11-11 15:12:56 | 2025-11-11 08:00:09 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 其他
- cnnvd_id: 未提取 -> CNNVD-202509-1078
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- data_sources: ['cve'] -> ['cve', 'nvd']