Medium severity4.2NVD Advisory· Published Sep 13, 2018· Updated Jun 17, 2026
CVE-2018-8435
CVE-2018-8435
Description
A security feature bypass vulnerability exists when Windows Hyper-V BIOS loader fails to provide a high-entropy source, aka "Windows Hyper-V Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers.
Affected products
12- Range: version 1709 (Server Core Installation)
(Server Core installation)+ 3 more
- (no CPE)range: (Server Core installation)
- cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*
Version 1607 for x64-based Systems+ 5 more
- (no CPE)range: Version 1607 for x64-based Systems
- cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:x64:*
Patches
Vulnerability mechanics
References
3- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8435nvdPatchVendor Advisory
- www.securityfocus.com/bid/105240nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1041624nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.