Vulnerability Description
Device Guard in Windows 10 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows a security feature bypass vulnerability due to the way untrusted files are handled, aka "Microsoft Windows Security Feature Bypass Vulnerability".
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Windows 10 | - |
| Microsoft | Windows Server 2016 | - |
References
- http://www.securityfocus.com/bid/102077Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039992Third Party AdvisoryVDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-1189PatchVendor Advisory
- http://www.securityfocus.com/bid/102077Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039992Third Party AdvisoryVDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-1189PatchVendor Advisory
FAQ
What is CVE-2017-11899?
CVE-2017-11899 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Device Guard in Windows 10 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows a security feature bypass vulnerability due to the way untrusted files are handled, ak...
How severe is CVE-2017-11899?
CVE-2017-11899 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2017-11899?
Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Windows 10, Microsoft Windows Server 2016.