CVE-2017-8716

Windows Control Flow Guard in Microsoft Windows 10 Version 1703 allows an attacker to run a specially crafted application to bypass Control Flow Guard, due to the way that Control Flow Guard handles objects in memory, aka "Windows Security Feature Bypass Vulnerability".

Score

CVSS 3.0 5.3 Medium

Status

Modified - secure@microsoft.com

Published

2017-09-13

Last modified

2024-09-17

Affected products

• Windows 10 (Microsoft)
• Windows Control Flow Guard (Microsoft Corporation)

References

• http://www.securityfocus.com/bid/100802
• http://www.securitytracker.com/id/1039325
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8716