CVE-2017-0215: microsoft corporation microsoft windows Exposure of Resource to Wrong Sphere

Vulnerability summary

CVE-2017-0215 is a medium (CVSS 5.3) Exposure of Resource to Wrong Sphere vulnerability in microsoft corporation microsoft windows. EPSS estimates a 35.76% chance of exploitation in the next 30 days, higher than 98.4% of scored vulnerabilities.

Timeline

1. 15-06-2017
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

Microsoft Windows 10 1607 and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that could allow the attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This CVE ID is unique from CVE-2017-0173, CVE-2017-0216, CVE-2017-0218, and CVE-2017-0219.

• CWE-668Exposure of Resource to Wrong SphereThe product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.