CVE-2017-11830: microsoft corporation device guard
Vulnerability summary
CVE-2017-11830 is a medium (CVSS 5.3) vulnerability in microsoft corporation device guard. EPSS estimates a 2.57% chance of exploitation in the next 30 days, higher than 84.9% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 15-11-2017PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
Device Guard in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to make an unsigned file appear to be signed, due to a security feature bypass, aka "Device Guard Security Feature Bypass Vulnerability".
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
2.57%
Chance of exploitation in the next 30 days
Percentile
85%
Versus all other CVEs
30-day change
0.00 pp
From 2.57% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundMicrosoft Windows 10 - CiSetFileCache TOCTOU Security Feature Bypass
Maturity: weaponized
Weaknesses
CWE · root causeAffected systems
Microsoft3 products
- windows_10na | 1511 | 1607 | 1703 | 1709
- windows_server1709
- windows_server_2016na
Microsoft corporation1 product
- device guardWindows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709.
2 vendors · 4 products
References
4 links- www.exploit-db.com/exploits/43162/ExploitX Refsource EXPLOIT DBTechnical DescriptionThird Party AdvisoryVDB Entry
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11830X Refsource CONFIRMPatchVendor Advisory