CVE-2017-11899
9.8
CRITICAL · CVSS 3.0 · EPSS 5.8% (pctl 93)
In your normal cycle
Critical by CVSS (9.8), but no sign of active exploitation.
Description
Device Guard in Windows 10 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows a security feature bypass vulnerability due to the way untrusted files are handled, aka "Microsoft Windows Security Feature Bypass Vulnerability".
Scoring
| CVSS | 9.8 (CRITICAL, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 5.84% — more likely to be exploited than 93% of all CVEs |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2017-12-12 |
| Last modified | 2026-06-17 |
Affected (2)
| Vendor | Product |
|---|---|
| microsoft | windows 10 |
| microsoft | windows server 2016 |
References
- http://www.securityfocus.com/bid/102077
- http://www.securitytracker.com/id/1039992
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11899
- http://www.securityfocus.com/bid/102077
- http://www.securitytracker.com/id/1039992
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11899
→ the Explorer · watch your stack · NVD