CVE-2018-8449
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 3.1%
from disclosure to weapon6 days
Published on NVDSep 13
1st PoC+6d
exploitation probability
3.1%top 13% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.
Affected products
Microsoft · Windows 10Microsoft · Windows 10 ServersMicrosoft · Windows Server 2016public PoCs found — 2✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/45435cve_referencewww.exploit-db.com/exploits/45435/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.