CVE-2017-0216

Microsoft Windows 10 1511, Windows 10 1607, and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that could allow the attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This CVE ID is unique from CVE-2017-0173, CVE-2017-0215, CVE-2017-0218, and CVE-2017-0219.

• http://www.securityfocus.com/bid/98896Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0216Mitigation, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/98896Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0216Mitigation, Patch, Vendor Advisory

Published

Jun 15, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-0210An elevation of privilege vulnerability exists when Internet…8.8
• CVE-2017-0211An elevation of privilege vulnerability exists in Windows 10…
• CVE-2017-0212Windows Hyper-V allows an elevation of privilege vulnerabili…
• CVE-2017-0213Windows COM Aggregate Marshaler in Microsoft Windows Server …7.3
• CVE-2017-0214Windows COM in Microsoft Windows Server 2008 SP2 and R2 SP1,…
• CVE-2017-0215Microsoft Windows 10 1607 and Windows Server 2016 allow an a…
• CVE-2017-0218Microsoft Windows 10 Gold, Windows 10 1511, Windows 10 1607,…
• CVE-2017-0219Microsoft Windows 10 Gold, Windows 10 1511, Windows 10 1607,…
• CVE-2017-0220The Windows kernel in Windows Server 2008 SP2 and R2 SP1, Wi…
• CVE-2017-0221A vulnerability exists when Microsoft Edge improperly access…
• CVE-2017-0222A remote code execution vulnerability exists when Internet E…8.8
• CVE-2017-0223A remote code execution vulnerability exists in Microsoft Ch…