7.3 High Exploited · ransomware

CVE-2017-0213 Microsoft Windows Privilege Escalation Vulnerability

Active exploitation observed

· CISA KEV catalogue

Required action Apply updates per vendor instructions.

Ransomware campaigns Known to be used

Description

Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a specially crafted application, aka "Windows COM Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-0214.

Affected products and versions

Product	Affected versions	Fixed in
Windows COM	Versions not published

References

98102 www.securityfocus.com
42020 www.exploit-db.com
1038457 www.securitytracker.com
portal.msrc.microsoft.com portal.msrc.microsoft.com

Timeline

Published May 12, 2017
Added to the KEV catalogue March 28, 2022
Last modified October 21, 2025

The 3 CVEs of Windows COM →

CVE-2017-0298 A DCOM object in Helppane.exe in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows… Not rated CVE-2017-0214 Windows COM in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… Not rated

Track this CVE