CVE-2017-8625
HighSummary
Internet Explorer in Windows 10 and Windows Server 2016 allows an attacker to bypass Device Guard User Mode Code Integrity (UMCI) policies due to the browser's failure to validate these policies.
Risk Assessment
Bypassing UMCI policies could lead to the execution of malicious code, posing a significant threat to the security of the system and the organization's data.
Recommendation
It is recommended to update systems to the latest versions and implement additional security measures to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Internet Explorer
See all- CVE-2017-11913High
Internet Explorer in Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012 and R2, Windows 10, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to how Internet Explorer handles objects in memory.
- CVE-2017-11907High
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, as well as Windows 10 and Windows Server 2016, allows an attacker to gain the same user rights as the current user due to improper handling of objects in memory. This is known as 'Scripting Engine Memory Corruption Vulnerability'.
- CVE-2017-11903High
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user due to how Internet Explorer handles objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.
- CVE-2017-11901High
Internet Explorer in Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012 and R2, Windows 10, and Windows Server 2016 has a vulnerability that allows an attacker to gain the same user rights as the current user. The issue arises from how Internet Explorer handles objects in memory.
- CVE-2017-11869High
Internet Explorer in Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012 and R2, Windows 10, and Windows Server 2016 allows an attacker to gain the same user rights as the current user due to how Microsoft browsers handle objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.
- CVE-2017-11856High
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 (all versions up to 1709) and Windows Server 2016 allows an attacker to gain the same user rights as the current user due to improper handling of objects in memory.
- CVE-2017-11855High
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and version 1709 allows an attacker to gain the same user rights as the current user, due to how Internet Explorer handles objects in memory.
- CVE-2017-11822High
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handles objects in memory.
- CVE-2017-11813High
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handles objects in memory.
- CVE-2017-11810High
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, as well as Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory.
Original NVD description (English source)
Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to bypass Device Guard User Mode Code Integrity (UMCI) policies due to Internet Explorer failing to validate UMCI policies, aka "Internet Explorer Security Feature Bypass Vulnerability".