diff --git a/Dockerfile b/Dockerfile
index 9ae005f..46bce76 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -44,7 +44,7 @@ ARG TOOLCHAIN_ARCHS="i686 x86_64 armv7 aarch64"
 
 ARG DEFAULT_CRT=ucrt
 
-ARG CFGUARD_ARGS=--disable-cfguard
+ARG CFGUARD_ARGS=--enable-cfguard
 
 # Build everything that uses the llvm monorepo. We need to build the mingw runtime before the compiler-rt/libunwind/libcxxabi/libcxx runtimes.
 COPY build-llvm.sh build-lldb-mi.sh strip-llvm.sh install-wrappers.sh build-mingw-w64.sh build-mingw-w64-tools.sh build-compiler-rt.sh build-libcxx.sh build-mingw-w64-libraries.sh build-openmp.sh ./
diff --git a/Dockerfile.dev b/Dockerfile.dev
index 11209ad..86bca0c 100644
--- a/Dockerfile.dev
+++ b/Dockerfile.dev
@@ -67,7 +67,7 @@ RUN ./install-wrappers.sh $TOOLCHAIN_PREFIX
 
 ARG DEFAULT_CRT=ucrt
 
-ARG CFGUARD_ARGS=--disable-cfguard
+ARG CFGUARD_ARGS=--enable-cfguard
 
 # Build MinGW-w64
 COPY build-mingw-w64.sh ./
diff --git a/build-all.sh b/build-all.sh
index 9487476..d5f9a76 100755
--- a/build-all.sh
+++ b/build-all.sh
@@ -18,7 +18,7 @@ set -e
 
 LLVM_ARGS=""
 MINGW_ARGS=""
-CFGUARD_ARGS="--disable-cfguard"
+CFGUARD_ARGS="--enable-cfguard"
 
 while [ $# -gt 0 ]; do
     case "$1" in