CVE-2018-8129

5.3 mediumEPSS 1.4%

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0854, CVE-2018-0958, CVE-2018-8132.

Severity

CVSS 3.0

5.3 medium

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
Published: 2018-05-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_10
microsoft:windows_server_2016

References

http://www.securityfocus.com/bid/104065
http://www.securitytracker.com/id/1040849
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8129
http://www.securityfocus.com/bid/104065
http://www.securitytracker.com/id/1040849

Check your stack JSON