CVE-2017-0213

State: Published
Severity: 7.3 High
Published: May 12, 2017
Updated: Oct 21, 2025
Reserved: Sep 9, 2016

Description

Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a specially crafted application, aka "Windows COM Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-0214.

Scores

CVSS	Score	Vector	Source
3.1	7.3 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Windows COMMicrosoft Corporation	Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016.Affected

References

98102vdb-entry
42020exploit
1038457vdb-entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0213
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0213government-resource

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.