CVE-2017-8625: microsoft corporation internet explorer Incorrect Default Permissions
Vulnerability summary
CVE-2017-8625 is a high (CVSS 8.8) Incorrect Default Permissions vulnerability in microsoft corporation internet explorer. EPSS estimates a 15.26% chance of exploitation in the next 30 days, higher than 96.7% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 08-08-2017PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to bypass Device Guard User Mode Code Integrity (UMCI) policies due to Internet Explorer failing to validate UMCI policies, aka "Internet Explorer Security Feature Bypass Vulnerability".
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
15.26%
Chance of exploitation in the next 30 days
Percentile
97%
Versus all other CVEs
30-day change
+1.77 pp
From 13.49% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (posts.specterops.io)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Microsoft1 product
- internet_explorerEOL11
Microsoft corporation1 product
- internet explorerWindows 10 Gold, 1511, 1607, 1703, and Windows Server 2016.
2 vendors · 2 products
References
5 links
- posts.specterops.io/umci-vs-internet-explorer-exploring-cve-2017-8625-3946536c6442ExploitThird Party Advisory