CVE-2017-0007

Description

Device Guard in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows remote attackers to modify PowerShell script without invalidating associated signatures, aka "PowerShell Security Feature Bypass Vulnerability."

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0007

https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-0374

https://enigma0x3.net/2017/04/03/defeating-device-guard-a-look-into-cve-2017-0007/

http://www.securitytracker.com/id/1038001

http://www.securityfocus.com/bid/96018

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS