CVEvulnerability
CVE-2017-8625
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-08-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-276
Description
Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to bypass Device Guard User Mode Code Integrity (UMCI) policies due to Internet Explorer failing to validate UMCI policies, aka "Internet Explorer Security Feature Bypass Vulnerability".
Affected configurations
• microsoft internet explorer 11
Related
Weakness · CWE (1)
- CWE-276 Incorrect Default Permissions weakness
References
- http://www.securityfocus.com/bid/100063 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039112 Third Party Advisory, VDB Entry
- https://oddvar.moe/2017/08/13/bypassing-device-guard-umci-using-chm-cve-2017-8625/ oddvar.moe
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8625 Patch, Vendor Advisory
- https://posts.specterops.io/umci-vs-internet-explorer-exploring-cve-2017-8625-3946536c6442 Exploit, Third Party Advisory
- http://www.securityfocus.com/bid/100063 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039112 Third Party Advisory, VDB Entry
- https://oddvar.moe/2017/08/13/bypassing-device-guard-umci-using-chm-cve-2017-8625/ oddvar.moe
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8625 Patch, Vendor Advisory
- https://posts.specterops.io/umci-vs-internet-explorer-exploring-cve-2017-8625-3946536c6442 Exploit, Third Party Advisory