Microsoft Windows Device Guard CVE-2017-11899 Remote Security Bypass Vulnerability

Bugtraq ID:	102077
Class:	Input Validation Error
CVE:	CVE-2017-11899
Remote:	Yes
Local:	No
Published:	Dec 12 2017 12:00AM
Updated:	Dec 19 2017 10:38PM
Credit:	James Forshaw of Google Project Zero
Vulnerable:	Microsoft Windows Server 2016 0 Microsoft Windows 10 version 1709 for x64-based Systems 0 Microsoft Windows 10 version 1709 for 32-bit Systems 0 Microsoft Windows 10 version 1703 for x64-based Systems 0 Microsoft Windows 10 version 1703 for 32-bit Systems 0 Microsoft Windows 10 Version 1607 for x64-based Systems 0 Microsoft Windows 10 Version 1607 for 32-bit Systems 0 Microsoft Windows 10 version 1511 for x64-based Systems 0 Microsoft Windows 10 version 1511 for 32-bit Systems 0 Microsoft Windows 10 for x64-based Systems 0 Microsoft Windows 10 for 32-bit Systems 0
Not Vulnerable:

Microsoft Windows Device Guard CVE-2017-11899 Remote Security Bypass Vulnerability

Microsoft Windows is prone to a remote security-bypass vulnerability.

An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks.

Microsoft Windows Device Guard CVE-2017-11899 Remote Security Bypass Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• CVE-2017-11899 | Microsoft Windows Security Feature Bypass Vulnerability (Microsoft)