← back
CVE-2018-8222

CVE-2018-8222

EPSS 2.0%
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 2.0%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
11 Jul 2018Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.
Affected products
Microsoft · Windows 10Microsoft · Windows 10 ServersMicrosoft · Windows Server 2016
References
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8222http://www.securityfocus.com/bid/104635http://www.securitytracker.com/id/1041265