A bypass flaw affects Windows 10 machines with Device Guard (DG) user mode code integrity (UMCI) enabled that an attacker could use to run arbitrary code. Microsoft was told of the issue on 19 January, which means the 90-days-to-fix deadline Google sets, after which it discloses flaws, passed last week. With Microsoft due to fix the flaw in Mays Patch Tuesday update, Google published details of the bug and a Proof-of-Concept on 19 April. Microsoft originally scheduled a fix for April but then admitted this was not likely to be met due to an unforeseen code relationship”]

