CVE-2018-8201

MediumCVSS 4.5/10Last modified Jun 17, 2026

Description

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8211, CVE-2018-8212, CVE-2018-8215, CVE-2018-8216, CVE-2018-8217, CVE-2018-8221.

Metrics

CVSS 3.0 4.5/10CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected software

VendorProductVersions
MicrosoftWindows Server 2016(Server Core installation)
MicrosoftWindows 1032-bit Systems; Version 1607 for 32-bit Systems; Version 1607 for x64-based Systems; Version 1703 for 32-bit Systems; Version 1703 for x64-based Systems; Version 1709 for 32-bit Systems; Version 1709 for x64-based Systems; Version 1803 for 32-bit Systems; Version 1803 for x64-based Systems; x64-based Systems
MicrosoftWindows 10 Serversversion 1709 (Server Core Installation); version 1803 (Server Core Installation)

References

Timeline

Published
Jun 14, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-82027.8An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level, aka ".NET FCVE-2018-82045.3A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerSheCVE-2018-82055.5A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Service Vulnerability." TCVE-2018-82067.5A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol (FTP) connections, aka "Windows FTP Server DCVE-2018-82074.7An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel InformationCVE-2018-82087.0An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual registry, aka "Windows DeCVE-2018-82098.0An information disclosure vulnerability exists when Windows allows a normal user to access the Wireless LAN profile of an administrative useCVE-2018-82107.8A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution VulnerabiCVE-2018-82115.3A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerSheCVE-2018-82125.3A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerSheCVE-2018-82137.8A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution VulnerabiCVE-2018-82147.0An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual registry, aka "Windows De
CVE-2018-8201: Medium severity, CVSS 4.5 | Vulnix