{"schemaVersion":3,"id":"CVE-2017-0213","aliases":[],"status":"published","duplicateOf":null,"title":"Microsoft Windows Privilege Escalation Vulnerability","description":"Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a specially crafted application, aka \"Windows COM Elevation of Privilege Vulnerability\". This CVE ID is unique from CVE-2017-0214.","dates":{"published":"2017-05-12T14:00:00.000Z","modified":"2025-10-21T23:55:41.209Z","reserved":null,"kevAdded":["2022-03-28T00:00:00.000Z"],"kevDue":["2022-04-18T00:00:00.000Z"]},"cvss":{"headline":{"score":7.3,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.3,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.3,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":1.9,"severity":"low","vector":"AV:L/AC:M/Au:N/C:N/I:P/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.84258,"percentile":0.99698,"severity":"critical","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.11999999999999789,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.84138},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.84258,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.84258,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.84258,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.84258,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.84258,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.84258,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.84258,"percentile":0.99698}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.84138,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.84258,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.84258,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.84258,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.84258,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.84258,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.84258,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.84258,"percentile":0.99698}]},"kev":{"state":"listed","entries":[{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-03-28T00:00:00.000Z","dueDate":"2022-04-18T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Microsoft Windows Privilege Escalation Vulnerability","description":"Microsoft Windows COM Aggregate Marshaler allows for privilege escalation when an attacker runs a specially crafted application.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2017-0213","label":"nvd.nist.gov/vuln/detail/CVE-2017-0213"}],"vendor":"Microsoft","product":"Windows","ransomware":true,"ransomwareUse":"Known","exploitationType":null}],"listedCount":1,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":true,"entry":{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-03-28T00:00:00.000Z","dueDate":"2022-04-18T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Microsoft Windows Privilege Escalation Vulnerability","description":"Microsoft Windows COM Aggregate Marshaler allows for privilege escalation when an attacker runs a specially crafted application.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2017-0213","label":"nvd.nist.gov/vuln/detail/CVE-2017-0213"}],"vendor":"Microsoft","product":"Windows","ransomware":true,"ransomwareUse":"Known","exploitationType":null}},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"known","sources":["cisa"]},"exploits":[{"id":"42020","name":"Microsoft Windows - COM Aggregate Marshaler/IRemUnknown2 Type Confusion Privilege Escalation","source":"exploit-database","url":"https://www.exploit-db.com/exploits/42020","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"local","platforms":["windows"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"local","platform":"windows","file":"exploits/windows/local/42020.cpp","codes":["CVE-2017-0213"]},"metasploit":null}],"exploitCount":1,"weaknesses":[],"affected":[{"vendor":"microsoft corporation","product":"windows com","name":"Windows COM","label":"windows com","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016.","noFixRecorded":false,"fixedIn":null}],"versionsText":"Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016.","eol":null,"hubHref":"/vendor/microsoft_corporation/windows_com"},{"vendor":"microsoft","product":"windows_10_1507","name":"windows 10 1507","label":"windows_10_1507","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_10_1507"},{"vendor":"microsoft","product":"windows_10_1511","name":"windows 10 1511","label":"windows_10_1511","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_10_1511"},{"vendor":"microsoft","product":"windows_10_1607","name":"windows 10 1607","label":"windows_10_1607","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_10_1607"},{"vendor":"microsoft","product":"windows_10_1703","name":"windows 10 1703","label":"windows_10_1703","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_10_1703"},{"vendor":"microsoft","product":"windows_7","name":"windows 7","label":"windows_7","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_7"},{"vendor":"microsoft","product":"windows_8.1","name":"windows 8.1","label":"windows_8.1","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_81"},{"vendor":"microsoft","product":"windows_rt_8.1","name":"windows rt 8.1","label":"windows_rt_8.1","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_rt_81"},{"vendor":"microsoft","product":"windows_server_2008","name":"windows server 2008","label":"windows_server_2008","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null},{"text":"r2:sp1","noFixRecorded":false,"fixedIn":null}],"versionsText":"na | r2:sp1","eol":null,"hubHref":"/vendor/microsoft/windows_server_2008"},{"vendor":"microsoft","product":"windows_server_2012","name":"windows server 2012","label":"windows_server_2012","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null},{"text":"r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"na | r2","eol":null,"hubHref":"/vendor/microsoft/windows_server_2012"},{"vendor":"microsoft","product":"windows_server_2016","name":"windows server 2016","label":"windows_server_2016","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/microsoft/windows_server_2016"}],"affectedCount":11,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.securityfocus.com/bid/98102","label":"www.securityfocus.com/bid/98102","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Broken Link","Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/42020/","label":"www.exploit-db.com/exploits/42020/","hostname":"www.exploit-db.com","tags":["Exploit","X Refsource EXPLOIT DB","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1038457","label":"www.securitytracker.com/id/1038457","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Broken Link","Third Party Advisory"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0213","label":"portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0213","hostname":"portal.msrc.microsoft.com","tags":["X Refsource CONFIRM","Patch","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0213","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0213","hostname":"www.cisa.gov","tags":["Government Resource","US Government Resource"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2017-05-12T14:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"kev-added","date":"2022-03-28T00:00:00.000Z","label":"Added to CISA KEV","detail":"Microsoft Windows Privilege Escalation Vulnerability","source":"cisa"},{"kind":"kev-due","date":"2022-04-18T00:00:00.000Z","label":"CISA remediation due","detail":"Apply updates per vendor instructions.","source":"cisa"},{"kind":"modified","date":"2025-10-21T23:55:41.209Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":90,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T22:32:17.526Z","stale":false,"partial":false}}