Three security bypass vulnerabilities (CVE-2019-0627, CVE-2019-0631 and CVE-2019-0632) have been found in Microsoft PowerShell Core which could allow an attacker to bypass Device Guard. An attacker who successfully exploited any of these vulnerabilities could circumvent a User Mode Code Integrity (UMCI) policy on the machine. To exploit the vulnerabilities, an attacker would ﬁrst have to access the local machine, and then run a malicious program. The update addresses the vulnerability by correcting how PowerShell Core validates User Mode Code Integrity policies.
Microsoft PowerShell Core Version 6.1
Microsoft PowerShell Core Version 6.2
Vendor has released updates for the aﬀected product.
Update to version 6.1.3.