ZeroDay Findings
Sign inSign up

Findings

CVE-2017-0213

Microsoft Windows Privilege Escalation Vulnerability

Published May 12, 2017 · updated Jun 16, 2026 · microsoft windows 10 1507

Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a specially crafted application, aka "Windows COM Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-0214.

Timeline

Detection, updates, and resolution for this record.

  1. May 12, 2017 · Catalog

    Detected

    Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a specially crafted application, aka "Windows COM Elevation of Privilege Vulnerability". This CVE ID is unique fr

  2. Mar 28, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Apr 18, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a specially crafted application, aka "Windows COM Elevation of Privilege Vulnerability". This CVE ID is unique fr

Required action

Apply updates per vendor instructions.

CISA due date Apr 18, 2022

Affected

  • cpe microsoft/windows 10 1507version unspecified
  • cpe microsoft/windows 10 1511version unspecified
  • cpe microsoft/windows 10 1607version unspecified
  • cpe microsoft/windows 10 1703version unspecified
  • cpe microsoft/windows 7version unspecified
  • cpe microsoft/windows 8.1version unspecified
  • cpe microsoft/windows rt 8.1version unspecified
  • cpe microsoft/windows server 2008version unspecified
  • vendor Microsoft Windowsversion unspecified

Sources

  • CISA KEVCVE-2017-0213

    Microsoft Windows COM Aggregate Marshaler allows for privilege escalation when an attacker runs a specially crafted application.

    cisa.gov
  • CVE.orgCVE-2017-0213

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2017-0213

    30-day exploitation probability 84.3%

    first.org
  • Exploit Database42020

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • NIST NVDCVE-2017-0213

    Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacke

    nvd.nist.gov

References