Medium severity5.5NVD Advisory· Published Mar 17, 2017· Updated May 13, 2026

CVE-2017-0007

Description

Device Guard in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows remote attackers to modify PowerShell script without invalidating associated signatures, aka "PowerShell Security Feature Bypass Vulnerability."

Affected products

Microsoft/Windows 103 versions
cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_10:1511:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*
Microsoft/Windows Server 2016
cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
Microsoft Corporation/Device Guardv5
Range: Device Guard in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0007nvdPatchVendor Advisory
www.securityfocus.com/bid/96018nvd
www.securitytracker.com/id/1038001nvd
enigma0x3.net/2017/04/03/defeating-device-guard-a-look-into-cve-2017-0007/nvd

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000