CVE-2018-8117 — A security feature bypass vulnerability exists in the Microsoft Wireless Keyboard 850 which could allow an attacker to reuse an AES encryption key to send keystrokes to other keyboard devices or to read keystrokes sent by other keyboards for the affected devices, aka "Microsoft Wireless Keyboard 850 Security Feature Bypass Vulnerability." This affects Microsoft Wireless Keyboard 850

Back Back to CVE browser

MEDIUM

A security feature bypass vulnerability exists in the Microsoft Wireless Keyboard 850 which could allow an attacker to reuse an AES encryption key to send keystrokes to other keyboard devices or to read keystrokes sent by other keyboards for the affected devices, aka "Microsoft Wireless Keyboard 850 Security Feature Bypass Vulnerability." This affects Microsoft Wireless Keyboard 850

Published Apr 12, 2018

6.8

MEDIUM

CVSS 3.0

EPSS 1.16%

Description

A security feature bypass vulnerability exists in the Microsoft Wireless Keyboard 850 which could allow an attacker to reuse an AES encryption key to send keystrokes to other keyboard devices or to read keystrokes sent by other keyboards for the affected devices, aka "Microsoft Wireless Keyboard 850 Security Feature Bypass Vulnerability." This affects Microsoft Wireless Keyboard 850.

Affected products

Vendor Microsoft Product Microsoft Wireless Keyboard 850 Default
n/a
- Version
  Microsoft Wireless Keyboard 850
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Microsoft Wireless Keyboard 850

n/a

Version	Status	Constraints
Microsoft Wireless Keyboard 850	affected	-

Remediation

No remediation recorded yet.

Metrics

1.16% 0.01158

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.01158

Score over time

2021–2026

EPSS v1
EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v1
EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (16 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	1.16% (0.01158)	65.90th	v5 (v2026.06.15)
Jun 15, 2026	1.13% (0.01131)	62.10th	v5 (v2026.06.15)
Mar 17, 2025	0.32% (0.00321)	52.88th	v4 (v2025.03.14)
Dec 12, 2024	0.06% (0.00060)	27.60th	v3 (v2023.03.01)
Jun 11, 2024	0.06% (0.00060)	25.56th	v3 (v2023.03.01)
Sep 2, 2023	0.06% (0.00060)	23.54th	v3 (v2023.03.01)
Mar 7, 2023	0.07% (0.00073)	29.71th	v3 (v2023.03.01)
Mar 6, 2023	5.71% (0.05708)	90.31th	v2 (v2022.01.01)
Aug 2, 2022	5.71% (0.05708)	89.79th	v2 (v2022.01.01)
Apr 1, 2022	5.20% (0.05203)	88.64th	v2 (v2022.01.01)
Feb 22, 2022	5.20% (0.05203)	75.51th	v2 (v2022.01.01)
Feb 4, 2022	4.43% (0.04434)	70.91th	v2 (v2022.01.01)
Feb 3, 2022	6.70% (0.06701)	83.28th	v1
Jan 6, 2022	6.70% (0.06701)	83.12th	v1
Sep 1, 2021	6.70% (0.06701)	91.08th	v1
Apr 14, 2021	6.70% (0.06701)	0.00th	v1

Weaknesses (0)

No CWE recorded.

References (2)

http://www.securityfocus.com/bid/103711
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8117
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/103711		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8117		x_refsource_CONFIRMPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Apr 12, 2018

Updated Aug 5, 2024

Reserved Mar 14, 2018

Link CVE-2018-8117

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-8117

Red Hat

Severity n/a

Public date n/a

Links CVE-2018-8117