CVE-2018-8449

EPSS 3.1%

A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.

Affected products

Microsoft · Windows 10 Microsoft · Windows 10 Servers Microsoft · Windows Server 2016

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/45435/unverified exploitdbwww.exploit-db.com/exploits/45435unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8449 https://www.exploit-db.com/exploits/45435/http://www.securityfocus.com/bid/105272 http://www.securitytracker.com/id/1041642