The Microsoft Device Guard on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass by the way it handles Windows PowerShell sessions, aka "Microsoft Windows Security Feature Bypass".
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
| Link | Tags |
|---|---|
| http://www.securitytracker.com/id/1039526 | vdb entry third party advisory |
| https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11823 | patch vendor advisory |
| https://www.exploit-db.com/exploits/42997/ | exploit vdb entry third party advisory |
| http://www.securityfocus.com/bid/101102 | vdb entry third party advisory |