{"history":[{"alert":0,"cve":"CVE-2017-0213","id":21644,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.84258, \"percentile\": 0.99702}"},{"alert":0,"cve":"CVE-2017-0213","id":19260,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.84258, \"percentile\": 0.997}"},{"alert":0,"cve":"CVE-2017-0213","id":17226,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.84258, \"percentile\": 0.99699}"},{"alert":0,"cve":"CVE-2017-0213","id":15289,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.84258, \"percentile\": 0.99699}"},{"alert":0,"cve":"CVE-2017-0213","id":13267,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.84258, \"percentile\": 0.99699}"},{"alert":1,"cve":"CVE-2017-0213","id":12807,"kind":"cna","observed_at":1794025201,"payload":"{\"containers\": {\"adp\": [{\"providerMetadata\": {\"dateUpdated\": \"2024-08-05T12:55:19.290Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"name\": \"98102\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\", \"x_transferred\"], \"url\": \"http://www.securityfocus.com/bid/98102\"}, {\"name\": \"42020\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\", \"x_transferred\"], \"url\": \"https://www.exploit-db.com/exploits/42020/\"}, {\"name\": \"1038457\", \"tags\": [\"vdb-entry\", \"x_refsource_SECTRACK\", \"x_transferred\"], \"url\": \"http://www.securitytracker.com/id/1038457\"}, {\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0213\"}], \"title\": \"CVE Program Container\"}, {\"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"LOCAL\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 7.3, \"baseSeverity\": \"HIGH\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"REQUIRED\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H\", \"version\": \"3.1\"}}, {\"other\": {\"content\": {\"id\": \"CVE-2017-0213\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2025-02-10T16:32:40.482780Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2022-03-28\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0213\"}, \"type\": \"kev\"}}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"CWE-noinfo Not enough information\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2025-10-21T23:55:41.209Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0213\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2022-03-28T00:00:00.000Z\", \"value\": \"CVE-2017-0213 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"product\": \"Windows COM\", \"vendor\": \"Microsoft Corporation\", \"versions\": [{\"status\": \"affected\", \"version\": \"Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016.\"}]}], \"datePublic\": \"2017-05-09T00:00:00.000Z\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a specially crafted application, aka \\\"Windows COM Elevation of Privilege Vulnerability\\\". This CVE ID is unique from CVE-2017-0214.\"}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"Elevation of Privilege\", \"lang\": \"en\", \"type\": \"text\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2017-08-12T09:57:01.000Z\", \"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\"}, \"references\": [{\"name\": \"98102\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\"], \"url\": \"http://www.securityfocus.com/bid/98102\"}, {\"name\": \"42020\", \"tags\": [\"exploit\", \"x_refsource_EXPLOIT-DB\"], \"url\": \"https://www.exploit-db.com/exploits/42020/\"}, {\"name\": \"1038457\", \"tags\": [\"vdb-entry\", \"x_refsource_SECTRACK\"], \"url\": \"http://www.securitytracker.com/id/1038457\"}, {\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0213\"}], \"x_legacyV4Record\": {\"CVE_data_meta\": {\"ASSIGNER\": \"secure@microsoft.com\", \"ID\": \"CVE-2017-0213\", \"STATE\": \"PUBLIC\"}, \"affects\": {\"vendor\": {\"vendor_data\": [{\"product\": {\"product_data\": [{\"product_name\": \"Windows COM\", \"version\": {\"version_data\": [{\"version_value\": \"Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016.\"}]}}]}, \"vendor_name\": \"Microsoft Corporation\"}]}}, \"data_format\": \"MITRE\", \"data_type\": \"CVE\", \"data_version\": \"4.0\", \"description\": {\"description_data\": [{\"lang\": \"eng\", \"value\": \"Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a specially crafted application, aka \\\"Windows COM Elevation of Privilege Vulnerability\\\". This CVE ID is unique from CVE-2017-0214.\"}]}, \"problemtype\": {\"problemtype_data\": [{\"description\": [{\"lang\": \"eng\", \"value\": \"Elevation of Privilege\"}]}]}, \"references\": {\"reference_data\": [{\"name\": \"98102\", \"refsource\": \"BID\", \"url\": \"http://www.securityfocus.com/bid/98102\"}, {\"name\": \"42020\", \"refsource\": \"EXPLOIT-DB\", \"url\": \"https://www.exploit-db.com/exploits/42020/\"}, {\"name\": \"1038457\", \"refsource\": \"SECTRACK\", \"url\": \"http://www.securitytracker.com/id/1038457\"}, {\"name\": \"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0213\", \"refsource\": \"CONFIRM\", \"url\": \"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0213\"}]}}}}, \"cveMetadata\": {\"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"assignerShortName\": \"microsoft\", \"cveId\": \"CVE-2017-0213\", \"datePublished\": \"2017-05-12T14:00:00.000Z\", \"dateReserved\": \"2016-09-09T00:00:00.000Z\", \"dateUpdated\": \"2025-10-21T23:55:41.209Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.1\"}"},{"alert":0,"cve":"CVE-2017-0213","id":11049,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.84258, \"percentile\": 0.99699}"},{"alert":0,"cve":"CVE-2017-0213","id":8795,"kind":"epss","observed_at":1793895600,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.84258, \"percentile\": 0.99698}"},{"alert":0,"cve":"CVE-2017-0213","id":6583,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.84258, \"percentile\": 0.99698}"},{"alert":0,"cve":"CVE-2017-0213","id":4360,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.84258, \"percentile\": 0.99697}"},{"alert":0,"cve":"CVE-2017-0213","id":2142,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.84258, \"percentile\": 0.99697}"},{"alert":1,"cve":"CVE-2017-0213","id":1175,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2017-0213\", \"cwes\": [], \"dateAdded\": \"2022-03-28\", \"dueDate\": \"2022-04-18\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Known\", \"notes\": \"https://nvd.nist.gov/vuln/detail/CVE-2017-0213\", \"product\": \"Windows\", \"requiredAction\": \"Apply updates per vendor instructions.\", \"shortDescription\": \"Microsoft Windows COM Aggregate Marshaler allows for privilege escalation when an attacker runs a specially crafted application.\", \"vendorProject\": \"Microsoft\", \"vulnerabilityName\": \"Microsoft Windows Privilege Escalation Vulnerability\"}"}],"record":{"affected":[{"product":"Windows COM","vendor":"Microsoft Corporation","versions":[{"status":"affected","version":"Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016."}]}],"cna":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-05T12:55:19.290Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"98102","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/98102"},{"name":"42020","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/42020/"},{"name":"1038457","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id/1038457"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0213"}],"title":"CVE Program Container"},{"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.3,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}},{"other":{"content":{"id":"CVE-2017-0213","options":[{"Exploitation":"active"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2025-02-10T16:32:40.482780Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2022-03-28","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0213"},"type":"kev"}}],"problemTypes":[{"descriptions":[{"description":"CWE-noinfo Not enough information","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2025-10-21T23:55:41.209Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0213"}],"timeline":[{"lang":"en","time":"2022-03-28T00:00:00.000Z","value":"CVE-2017-0213 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"Windows COM","vendor":"Microsoft Corporation","versions":[{"status":"affected","version":"Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016."}]}],"datePublic":"2017-05-09T00:00:00.000Z","descriptions":[{"lang":"en","value":"Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a specially crafted application, aka \"Windows COM Elevation of Privilege Vulnerability\". This CVE ID is unique from CVE-2017-0214."}],"problemTypes":[{"descriptions":[{"description":"Elevation of Privilege","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-12T09:57:01.000Z","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft"},"references":[{"name":"98102","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/98102"},{"name":"42020","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/42020/"},{"name":"1038457","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id/1038457"},{"tags":["x_refsource_CONFIRM"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0213"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secure@microsoft.com","ID":"CVE-2017-0213","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Windows COM","version":{"version_data":[{"version_value":"Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016."}]}}]},"vendor_name":"Microsoft Corporation"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a specially crafted application, aka \"Windows COM Elevation of Privilege Vulnerability\". This CVE ID is unique from CVE-2017-0214."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Elevation of Privilege"}]}]},"references":{"reference_data":[{"name":"98102","refsource":"BID","url":"http://www.securityfocus.com/bid/98102"},{"name":"42020","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/42020/"},{"name":"1038457","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1038457"},{"name":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0213","refsource":"CONFIRM","url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0213"}]}}}},"cveMetadata":{"assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","assignerShortName":"microsoft","cveId":"CVE-2017-0213","datePublished":"2017-05-12T14:00:00.000Z","dateReserved":"2016-09-09T00:00:00.000Z","dateUpdated":"2025-10-21T23:55:41.209Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"cna_checked":1794025201,"cve":"CVE-2017-0213","description":"Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a specially crafted application, aka \"Windows COM Elevation of Privilege Vulnerability\". This CVE ID is unique from CVE-2017-0214.","epss":{"date":"2026-11-12","epss":0.84258,"percentile":0.99702},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2017-0213","cwes":[],"dateAdded":"2022-03-28","dueDate":"2022-04-18","forensicTriage":"No","knownRansomwareCampaignUse":"Known","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-0213","product":"Windows","requiredAction":"Apply updates per vendor instructions.","shortDescription":"Microsoft Windows COM Aggregate Marshaler allows for privilege escalation when an attacker runs a specially crafted application.","vendorProject":"Microsoft","vulnerabilityName":"Microsoft Windows Privilege Escalation Vulnerability"},"kev_checked":1794522003,"products":"Microsoft Corporation Windows COM","references":["http://www.securityfocus.com/bid/98102","https://www.exploit-db.com/exploits/42020/","http://www.securitytracker.com/id/1038457","https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0213","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0213"],"score":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.3,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","provider":"CISA-ADP","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"Microsoft Windows Privilege Escalation Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[]}