CVE-2018-8129

Severity: medium (CVSS 5.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-05-09 · updated 2026-06-17

Description

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0854, CVE-2018-0958, CVE-2018-8132.

Affected products

Microsoft Windows 10 Version 1607: 1607, 1703, 1709, 1803
Microsoft Windows Server 2016: 1709, 1803

References

http://www.securityfocus.com/bid/104065
http://www.securitytracker.com/id/1040849
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8129
http://www.securityfocus.com/bid/104065
http://www.securitytracker.com/id/1040849
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8129

Get alerted when CVE-2018-8129 or the next vulnerability affects your stack