CVE-2018-0827

Severity: medium (CVSS 5.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-02-15 · updated 2026-06-17

Description

Windows Scripting Host (WSH) in Windows 10 versions 1703 and 1709 and Windows Server, version 1709 allows a Device Guard security feature bypass vulnerability due to the way objects are handled in memory, aka "Windows Security Feature Bypass Vulnerability".

Affected products

Microsoft Windows 10 Version 1607: 1703, 1709
Microsoft Windows Server 2016: 1709
Microsoft Corporation Windows Scripting Host: Windows 10 versions 1703 and 1709 and Windows Server, version 1709

References

http://www.securityfocus.com/bid/102927
http://www.securitytracker.com/id/1040373
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0827
http://www.securityfocus.com/bid/102927
http://www.securitytracker.com/id/1040373
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0827

Get alerted when CVE-2018-0827 or the next vulnerability affects your stack