Important EPSS 0.00864 2019-10 archive

Executive Summary

A security feature bypass vulnerability exists in Windows 10 Mobile when Cortana allows a user to access files and folders through the locked screen. An attacker who successfully exploited this vulnerability could access the photo library of an affected phone and modify or delete photos without authenticating to the system. To exploit the vulnerability, an attacker would require physical access and the phone would need to have Cortana assistance allowed from the lock screen.

Overview

Important
MS Severity
Not Exploited
MS Exploit Status
Less Likely
MS Exploit Likelihood
Category Security Feature Bypass
Released Oct 8 2019
Last Updated Oct 8 2019
Publicly Disclosed No
CISA KEV Not Listed
Known Exploits None Known
EPSS Score 0.00864 — 0.53839 percentile

EPSS Score

0.00864
probability of exploitation in the next 30 days
0.53839 percentile - updated 2026-06-20
View on FIRST.org

Affected Products

1 affected product
Product KB Article Severity Impact Restart Required
Windows 10 Mobile Important Security Feature Bypass Unknown

Patches

1 patch
Article Type Restart
Unknown

Known Exploits

Acknowledgments

Yuval Ron , Amichai Shulman, and Eli Biham of Technion - Israel Institue of Technology