← Back

CVE-2017-11830

nvd nist
Published: Nov 15, 2017Modified: May 13, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Exploitability: 1.8 / Impact: 3.4
Source: NVD

Description

Device Guard in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to make an unsigned file appear to be signed, due to a security feature bypass, aka "Device Guard Security Feature Bypass Vulnerability".

Affected (7)

Microsoft
3 products
Windows 10
Windows Server
Windows Server 2016
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Windows 10
All versions
Windows 10
Version 1511
Windows 10
Version 1607
Windows 10
Version 1703
Windows 10
Version 1709
Windows Server
Version 1709
Windows Server 2016
All versions

Related CWEs

CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition
The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. This can cause the product to perform invalid actions when the resource is in an unexpected state.

References (8)

Source: secure@microsoft.com
Third Party AdvisoryVDB Entry
Source: secure@microsoft.com
Third Party AdvisoryVDB Entry
Source: secure@microsoft.com
PatchVendor Advisory
Source: secure@microsoft.com
ExploitTechnical DescriptionThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitTechnical DescriptionThird Party AdvisoryVDB Entry

Timeline

No history available yet.