CVEs / CVE-2017-0215
CVE-2017-0215: Microsoft Corporation Microsoft Windows vulnerability
- medium 5.3 CVSS 3.0 (NVD)
- EPSS 39.6% chance of exploitation in the next 30 days, higher than 98% of CVEs (8 Nov 2026)
- Last changed at its sources
Are you affected? Check your servers with Stackurity: it lists the software on each server and the vulnerabilities to fix first.
Check your servers with Stackurity Already using Stackurity? Search for CVE-2017-0215
Description
Microsoft Windows 10 1607 and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that could allow the attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This CVE ID is unique from CVE-2017-0173, CVE-2017-0216, CVE-2017-0218, and CVE-2017-0219.
Affected and fixed versions
| Product | Affected | Fixed in |
|---|---|---|
| Microsoft Corporation Microsoft Windows | Microsoft Windows 10 1607 and Windows Server 2016. | — |
Exploitation
Not in the CISA Known Exploited Vulnerabilities catalog as of 6 Nov 2026.
Severity
| CVSS 3.0 | 5.3 mediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LScored by NVD |
|---|---|
| Weakness | CWE-668 |
References
- CVE-2017-0215 on NVD
- http://www.securityfocus.com/bid/98879 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038669
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0215 Mitigation, Patch, Vendor Advisory
- https://posts.specterops.io/umci-bypass-using-psworkflowutility-cve-2017-0215-71c76c1588f9
Sources
Exploitation status from the CISA Known Exploited Vulnerabilities catalog. EPSS scores from FIRST. Descriptions, severity and references from the National Vulnerability Database. Open-source package versions from OSV (CC-BY 4.0). Text is shown as each source states it; Stackurity does not edit it. Check the vendor's advisory before acting.
This product uses data from the NVD API but is not endorsed or certified by the NVD.