CVE-2017-11899

Critical

Published: 12/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A vulnerability in Device Guard in Windows 10 and Windows Server allows a security feature bypass due to improper handling of untrusted files.

Risk Assessment

Organizations may be exposed to attacks that exploit this vulnerability to bypass system security, potentially leading to unauthorized access to data.

Recommendation

It is recommended to update systems to the latest versions and implement additional security measures to protect against potential attacks.

Original NVD description (English source)

Device Guard in Windows 10 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows a security feature bypass vulnerability due to the way untrusted files are handled, aka "Microsoft Windows Security Feature Bypass Vulnerability".