CVE-2018-8142

MEDIUM

Windows 10 and Windows Server 2016 - Security Feature Bypass via Kernel Driver Signature Validation

Title source: llm

Description

A security feature bypass exists when Windows incorrectly validates kernel driver signatures, aka "Windows Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-1035.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/103962

Patch, Vendor Advisory x_refsource_confirm

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8142

Scores

CVSS v3 5.3

EPSS 0.0133

EPSS Percentile 68.3%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Details

Status published

Products (5)

microsoft/windows_10 1607

microsoft/windows_10 1703

microsoft/windows_10 1709

microsoft/windows_server_2016

microsoft/windows_server_2016 1709

Published May 21, 2018

Tracked Since Feb 18, 2026