CVE-2017-0218: Microsoft Windows 10 Gold, Windows 10 1511, Windows 10 1607, and Windows Server 2016 allow an attacker to e...

Security readout for executives and security teams

This issue weakens a Windows protection called Device Guard. An attacker could bypass code integrity policy controls and inject malicious code into a Windows PowerShell session. The source bundle names older Windows 10 releases and Windows Server 2016 as affected, but does not provide CVSS severity or exploit details. Exposure is most likely on assets running the listed Windows 10 builds or Windows Server 2016, especially where Device Guard or code integrity policy is part of the security model. The source bundle does not identify other Microsoft products as affected. Prioritize assessment where affected Windows versions protect sensitive systems or depend on Device Guard for application control. Business urgency is constrained by missing severity and exploit evidence, but security bypasses can reduce confidence in endpoint containment controls. Mitigation focus: Review Microsoft MSRC guidance for CVE-2017-0218 before selecting remediation.; Inventory Windows 10 Gold, 1511, 1607, and Windows Server 2016 systems.; Prioritize systems relying on Device Guard or PowerShell control boundaries..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.