CVE-2018-8566

MEDIUM

Windows 10 and Windows Server 2016/2019 - BitLocker Security Feature Bypass

Title source: llm

Description

A security feature bypass vulnerability exists when Windows improperly suspends BitLocker Device Encryption, aka "BitLocker Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.

References (2)

Core 2

Core References

Patch, Vendor Advisory x_refsource_confirm

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8566

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/105806

Scores

CVSS v3 4.6

EPSS 0.0106

EPSS Percentile 61.2%

Attack Vector PHYSICAL

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

Status published

Products (9)

microsoft/windows_10 1607

microsoft/windows_10 1703

microsoft/windows_10 1709

microsoft/windows_10 1803

microsoft/windows_10 1809

microsoft/windows_server_2016

microsoft/windows_server_2016 1709

microsoft/windows_server_2016 1803

microsoft/windows_server_2019

Published Nov 14, 2018

Tracked Since Feb 18, 2026