CVE-2017-0213

A flaw in Windows COM (Component Object Model) system allows an attacker to run a specially crafted application to gain higher privileges on the system. This is dangerous because it lets attackers bypass security restrictions and take control of a computer.

The Windows COM Aggregate Marshaler contains an elevation of privilege vulnerability that can be exploited when a user executes a malicious application. The attack requires local code execution but no authentication, allowing privilege escalation from a lower-privileged context to SYSTEM or administrator level on affected Windows versions.