# CVE-2017-0213

Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a specially crafted application, aka "Windows COM Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-0214.

- Page: https://www.vulneraibility.com/cve/CVE-2017-0213
- CVSS: 7.3
- Known exploited: yes, in CISA KEV since 2022-03-28; CISA due date 2022-04-18; known ransomware use
- EPSS: 84.26% (percentile 99.7)
- Public exploit code: 1 on Exploit-DB · 6 GitHub proofs of concept (first 2017-05-17)
- CISA SSVC: exploitation active, automatable no, technical impact total (assessed 2025-02-10)
- Published: 2017-05-12

## Affected versions

- Microsoft Corporation Windows COM: affected Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016.

A version outside these ranges is not a statement that it is unaffected.

## References

- [other] http://www.securityfocus.com/bid/98102
- [exploit] https://www.exploit-db.com/exploits/42020/
- [other] http://www.securitytracker.com/id/1038457
- [other] https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0213
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0213

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.