CVE-2018-0854

CVSS 3.0: 5.3 medium
EPSS: 2%p73
Published: May 9, 2018 · May 9, 2018
Modified: Jun 17, 2026

Analyze CVE-2018-0854 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A security feature bypass vulnerability exists in Windows Scripting Host which could allow an attacker to bypass Device Guard, aka "Windows Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0958, CVE-2018-8129, CVE-2018-8132.

Vendors: microsoft

Products: windows 10, windows server 2016

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news

1 story

Microsoft Patch Tuesday

Cisco TalosMay 8, 19:02 UTC · May 8, 2018VulnerabilityCVE-2018-4944 CVE-2018-8174 CVE-2018-0959+613 · 1 read