CVE-2017-8625
First published: Tue Aug 08 2017(Updated: )
Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to bypass Device Guard User Mode Code Integrity (UMCI) policies due to Internet Explorer failing to validate UMCI policies, aka "Internet Explorer Security Feature Bypass Vulnerability".
Credit: secure@microsoft.com secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Internet Explorer | =11 | |
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | =1511 | |
| Microsoft Windows 10 | =1607 | |
| Microsoft Windows Server 2016 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8625
- https://posts.specterops.io/umci-vs-internet-explorer-exploring-cve-2017-8625-3946536c6442
- http://www.securityfocus.com/bid/100063
- http://www.securitytracker.com/id/1039112
- https://oddvar.moe/2017/08/13/bypassing-device-guard-umci-using-chm-cve-2017-8625/
- https://msitpros.com/?p=3909
Frequently Asked Questions
What is the severity of CVE-2017-8625?
CVE-2017-8625 is categorized as a security feature bypass vulnerability in Internet Explorer.
How do I fix CVE-2017-8625?
To mitigate CVE-2017-8625, ensure your system is updated with the latest security patches from Microsoft.
Which versions of Internet Explorer are affected by CVE-2017-8625?
CVE-2017-8625 affects Internet Explorer 11 on Windows 10 and various Windows Server 2016 configurations.
Can CVE-2017-8625 be exploited remotely?
Yes, CVE-2017-8625 can potentially be exploited remotely to bypass critical security policies.
What products are impacted by CVE-2017-8625?
CVE-2017-8625 impacts Internet Explorer on Windows 10, specifically versions 1511, 1607, 1703, and Windows Server 2016.
- agent/references
- agent/author
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/remedy
- agent/weakness
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-api
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/microsoft
- canonical/internet explorer
- version/internet explorer/11
- canonical/microsoft windows 10
- version/microsoft windows 10/1511
- version/microsoft windows 10/1607
- canonical/microsoft windows server 2016