CVE-2018-8449

3.3 lowEPSS 3.1%

Low (3.3) in microsoft. EPSS 3.1% chance of exploitation in the next 30 days.

A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.

Severity

CVSS 3.0

3.3 low

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS: 3.1% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CWE: CWE-367
Published: 2018-09-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_10
microsoft:windows_server_2016

References

http://www.securityfocus.com/bid/105272
http://www.securitytracker.com/id/1041642
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8449
https://www.exploit-db.com/exploits/45435/
http://www.securityfocus.com/bid/105272

Check your stack JSON