CVE-2017-8746

EUVD-2017-17692
Windows Device Guard in Windows 10 1607, 1703, and Windows Server 2016 allows A security feature bypass vulnerability due to how PowerShell exposes functions and processes user supplied code, aka "Device Guard Security Feature Bypass Vulnerability".
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
LOCAL
LOW
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 66%
Affected Products (NVD)
VendorProductVersion
microsoftwindows_server_2016
-
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows 10
1607 (x64, x86)
KB4038782
1703 (x64, x86)
KB4038788
Windows Server 2016
Server Core
KB4038782
Standard
KB4038782
References
http://www.securityfocus.com/bid/100760
http://www.securitytracker.com/id/1039340
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8746
http://www.securityfocus.com/bid/100760
http://www.securitytracker.com/id/1039340
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8746