Microsoft Vulnerable Driver Blocklist is a built in security feature in Windows 11 that helps protect your computer from malicious or vulnerable drivers. Microsoft maintains a list of drivers that have known security flaws or have been exploited by attackers. When this feature is enabled, Windows automatically blocks those drivers from loading, reducing the risk of malware, ransomware, and kernel-level attacks.
Although this feature is highly recommended for most users, there are situations where you may need to disable Microsoft Vulnerable Driver Blocklist. For example, you may be using older hardware, specialized enterprise software, legacy drivers, or development tools that require drivers included in Microsoft’s blocklist. In such cases, Windows may prevent those drivers from working properly until the blocklist is turned off.
In this guide, you’ll learn how to disable the Microsoft Vulnerable Driver Blocklist in Windows 11 using different methods.
Microsoft Vulnerable Driver Blocklist
The Microsoft Vulnerable Driver Blocklist works alongside Core Isolation and Memory Integrity to stop unsafe kernel drivers from loading. While this security feature improves protection against sophisticated attacks, it can also prevent older or unsigned drivers from working correctly.
Depending on your version of Windows 11, you may find a dedicated switch for the blocklist inside Windows Security. If that option isn’t available, Windows manages the blocklist automatically through other security settings. In those cases, you’ll need to disable Memory Integrity or modify Windows policies or registry settings.
Important: Before making any changes, make sure you understand the security impact. Disabling this feature lowers your computer’s protection against vulnerable drivers. If possible, consider updating the driver to the latest version instead of disabling the blocklist permanently.
Disable Microsoft Vulnerable Driver Blocklist in Windows 11
To disable Microsoft Vulnerable Driver Blocklist in Windows 11, open Windows Security, go to Device Security, select Core Isolation Details, and turn Microsoft Vulnerable Driver Blocklist off if the option is available. If the toggle isn’t visible, you can disable it by turning off Memory Integrity or by using Windows Registry Editor or Group Policy Editor, depending on your Windows edition. Restart your PC after making the change for it to take effect.
Let’s get the detailed steps!
Step 1: Check Whether the Driver Blocklist Toggle Is Available
The easiest way to disable the Microsoft Vulnerable Driver Blocklist is through Windows Security. Start by clicking the Start button and opening the Settings app. Select Privacy & Security, then click Windows Security. Choose Device Security, and under Core Isolation, click Core Isolation Details.
If your version of Windows 11 includes a dedicated Microsoft Vulnerable Driver Blocklist switch, you’ll see it on this page. Simply turn the toggle Off. Windows may ask for administrator approval before applying the change.
After turning the feature off, restart your computer. Once Windows starts again, the vulnerable driver blocklist will no longer prevent blocked drivers from loading.
If you don’t see this option, don’t worry. Many Windows 11 installations don’t display the toggle because Microsoft manages the feature automatically. Continue to the next step.
Step 2: Disable Memory Integrity
If the Microsoft Vulnerable Driver Blocklist setting isn’t available, the next method is to disable Memory Integrity, since the blocklist often operates together with this security feature.
Open Settings, select Privacy & Security, and then open Windows Security. Click Device Security, followed by Core Isolation Details.
Locate the Memory Integrity option and switch it Off. Windows will notify you that a restart is required. Save any open work and restart your PC.
Once your computer restarts, Windows will no longer enforce several virtualization-based security protections, including the vulnerable driver blocklist in many configurations.
Keep in mind that Memory Integrity provides an extra layer of protection against kernel-level attacks. Only disable it if you absolutely need compatibility with older drivers or software.
Step 3: Disable the Blocklist Using Registry Editor
Advanced users can also disable the feature through the Windows Registry. This method should be used carefully because incorrect registry changes can affect Windows stability.
Press Windows + R, type regedit, and press Enter. Approve the User Account Control prompt if it appears.
Navigate to the following registry location:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CI\Config
In the right pane, look for a value named VulnerableDriverBlocklistEnable.
If the value exists, double-click it and change its Value data from 1 to 0. Click OK to save the change.
If the value doesn’t exist, create a new DWORD (32-bit) Value, name it VulnerableDriverBlocklistEnable, and set its value to 0.
Close the Registry Editor and restart your computer. After Windows restarts, the driver blocklist should be disabled according to the registry configuration.
If you ever want to enable the feature again, simply change the value back to 1.
Step 4: Use the Local Group Policy Editor
If you’re running Windows 11 Pro, Enterprise, or Education, you can manage certain security settings through the Local Group Policy Editor.
Press Windows + R, type gpedit.msc, and press Enter.
Navigate through the available security and Windows Defender Application Control-related policies, depending on your Windows build. Microsoft periodically updates these policy locations, so they may vary slightly between versions.
Locate the policy related to Microsoft Vulnerable Driver Blocklist or Application Control. Change the setting to Disabled, apply the changes, and close the editor.
Restart your PC so Windows reloads the updated policy settings.
If you’re using Windows 11 Home, this method isn’t available because Group Policy Editor isn’t included by default.
Step 5: Confirm That the Blocklist Is Disabled
After restarting your computer, it’s a good idea to verify that your changes have taken effect.
Open Windows Security again and return to Device Security. If the toggle is available, confirm that it remains switched Off.
You can also install or load the driver that was previously blocked. If it now loads without Windows preventing it, the vulnerable driver blocklist has likely been disabled successfully.
If the driver is still blocked, check whether Memory Integrity, Smart App Control, or your organization’s security policies are preventing the driver from loading.
Remember that Windows Updates may occasionally restore certain security settings after major feature updates. If this happens, you may need to repeat the process.
FAQs
Is it safe to disable Microsoft Vulnerable Driver Blocklist?
No, it reduces your system’s protection against drivers with known security vulnerabilities. Only disable it if you trust the driver and absolutely need it for compatibility.
Why can’t I find the Microsoft Vulnerable Driver Blocklist option?
Not every version of Windows 11 displays the toggle. Microsoft enables and manages this feature automatically on many systems, especially when Memory Integrity is turned on.
Does disabling Memory Integrity also disable the driver blocklist?
In many Windows 11 configurations, yes. Since these features work together, turning off Memory Integrity often stops Windows from enforcing the vulnerable driver blocklist.
Will Windows Update turn the feature back on?
It can. Major Windows 11 feature updates or security updates may restore recommended security settings, including the vulnerable driver blocklist.
Can I disable the blocklist in Windows 11 Home?
Yes. You can usually use Windows Security or Registry Editor. However, Local Group Policy Editor is not included in Windows 11 Home.
Should I update my driver instead of disabling the blocklist?
Yes. Updating to the latest driver version is the safest option. Driver manufacturers often release newer versions that fix security vulnerabilities while maintaining compatibility with Windows 11.
Summary
The Microsoft Vulnerable Driver Blocklist is an important security feature designed to protect Windows 11 from drivers that have known vulnerabilities. While it’s best to leave this protection enabled, some older hardware, specialized software, and legacy drivers may require you to disable it temporarily.
The easiest approach is to check Windows Security for a dedicated toggle. If it’s unavailable, you can disable Memory Integrity, modify the Windows Registry, or use Local Group Policy Editor on supported editions. After making any changes, always restart your computer and verify that the required driver works correctly.
Whenever possible, install an updated, trusted driver instead of disabling security protections. This allows you to maintain the highest level of security while ensuring your hardware and software continue to work properly on Windows 11.