Is CVE-2017-0213 exploitable?

Yes — CVE-2017-0213 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, meaning it is confirmed exploited in the wild.

Is CVE-2017-0213 a false positive?

No practitioners have marked CVE-2017-0213 a false positive so far (3 verdicts).

How do I remediate CVE-2017-0213?

See the authoritative references (NVD, vendor advisory) and community field notes on this page for remediation guidance.

CVE-2017-0213

is CVE-2017-0213real, exploitable, or a false positive? Here's the community ground truth.

☆ Watch

High · CVSS 7.3EPSS 84.1%CISA KEV

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a specially crafted application, aka "Windows COM Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-0214.

References

NVD MITRE CVE.org CISA KEV

Published May 12, 2017

Embed this verdict

Markdown

[![TruePositive verdict](https://www.truepositive.app/cve/CVE-2017-0213/badge.svg)](https://www.truepositive.app/cve/CVE-2017-0213)

HTML

<a href="https://www.truepositive.app/cve/CVE-2017-0213"><img src="https://www.truepositive.app/cve/CVE-2017-0213/badge.svg" alt="TruePositive verdict for CVE-2017-0213"></a>

Live badge — updates automatically as the community verdict changes.

Community ground truth

Community verdict

3 verdicts

Not a real issue

Includes TruePositive's curated baseline from public sources — community verdicts accrue on top.

to add your verdict.

Community real-world severity: Critical (Critical 3) — CVSS base score 7.3

Practitioners rate this higher than its CVSS — treat with extra caution.

Field notes & remediation

Verdicts are the quick signal — notes are the evidence and fixes behind them.

0
Field note · Priya NairCurated
Confirmed exploited in the wild — listed in the CISA KEV catalog (added 2022-03-28). Linked to known ransomware campaigns. Treat as real and prioritize patching over triage.