FeatureSettingsOverride multiple value entries

Mitchell Smith 5 Reputation points
2024-03-01T09:11:15.7366667+00:00

Hello,

i am looking to apply a patch to disable downfall mitigation. i am looking to amend the FeatureSettingsOverride value to "33554432" as per recommendations.

However, FeatureSettingsOverride value is already set as "72" in order to mitigate other CVE, Can someone please confirm which value i need to set in order to mitigate the previous cve aswell as disable downfall mitigation?

Thanks

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,206 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,732 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. S3dbuo0zT7 0 Reputation points
    2024-04-28T12:49:39.8+00:00

    To activate multiple mitigations, you must add the REG_DWORD values of the individual mitigations. For disabling the downfall mitigation, you need to bitwise OR the current value of FeatureSettingsOverride with 0x2000000 (33554432 in decimal).

    0x72 | 0x2000000 = 0x2000072 (33554546 dec)
    0 comments