CVE-2017-0213 is an elevation of privilege vulnerability in the Windows COM Aggregate Marshaler, affecting numerous Windows versions including Windows 7, 8.1, 10, and various Windows Server editions. This flaw allows an attacker to gain elevated privileges by running a specially crafted application. With a CVSS score of 7.3 (High), it has a low attack complexity and requires local access and user interaction, but can lead to complete compromise of confidentiality, integrity, and availability. The vulnerability is actively exploited in the wild, notably by ransomware campaigns, and has publicly available exploit code (EDB-42020). It has garnered significant community discussion and media coverage, indicating its widespread impact and importance.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10_1511:-:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.