CVE-2017-0213: high-severity vulnerability in Microsoft Corporation Windows COM
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA, has a public proof of concept and 2 threat group(s) use it.
Groups known to exploit this vulnerability (MITRE ATT&CK attribution).
Apply updates per vendor instructions.
A flaw in Windows COM (Component Object Model) system allows an attacker to run a specially crafted application to gain higher privileges on the system. This is dangerous because it lets attackers bypass security restrictions and take control of a computer.
The Windows COM Aggregate Marshaler contains an elevation of privilege vulnerability that can be exploited when a user executes a malicious application. The attack requires local code execution but no authentication, allowing privilege escalation from a lower-privileged context to SYSTEM or administrator level on affected Windows versions.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.