CVE-2017-0213NVD

Vulnerability Summary

Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a specially crafted application, aka "Windows COM Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-0214.

Severity Level

HIGH(7.3)

Published Date

May 12, 2017

Last Modified

Apr 22, 2026

Exploitation Status

ACTIVE

EPSS Score (30-Day)

92.45%Probability

Root Weakness (CWE)

NVD-CWE-noinfo: Unknown/Unlisted Weakness ↗

Refer to the official MITRE database for detailed architectural specifications regarding this weakness.

CVSS v3.1 Base Metrics

Attack VectorLocal

Attack ComplexityLow

Privileges RequiredLow

User InteractionRequired

ScopeUnchanged

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

External References

http://www.securityfocus.com/bid/98102
http://www.securitytracker.com/id/1038457
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0213
https://www.exploit-db.com/exploits/42020/
http://www.securityfocus.com/bid/98102
http://www.securitytracker.com/id/1038457
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0213
https://www.exploit-db.com/exploits/42020/
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0213