CVE-2017-0211 json
An elevation of privilege vulnerability exists in Windows 10, Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, and…
published 2017-04-12 9 y ago modified 2026-06-17 4 mo ago also EUVD-2017-0577
- cvss
- 5.5
- version 3.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 14.1%
- EPSS 14.1% chance of exploitation in 30 days, percentile 96%
- public exploits
- 1
- Exploit-DB
Summary
An elevation of privilege vulnerability exists in Windows 10, Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 versions of Microsoft Windows OLE when it fails an integrity-level check, aka "Windows OLE Elevation of Privilege Vulnerability."
Patch / fix
Timeline
- Published
- First public exploit (EDB-41902)
Exploit prediction
14.09% chance of exploitation in the next 30 days, higher than 96% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-41902 Microsoft Windows 10 - Runtime Broker ClipboardBroker Privilege Escalation local, 2017-04-20
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.0 | 5.5 | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N |
| NVD | 2.0 | 4.3 | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Affected products
- Microsoft Corporation Windows OLE
Classification
- Weakness
-
- CWE-610 Externally Controlled Reference to a Resource in Another Sphere
References
-
portal.msrc.microsoft.com
/en-US/security-guidance/advisory/CVE-2017-0211
patch, vendor-advisory
-
exploit-db.com
/exploits/41902/
exploit
-
securitytracker.com
/id/1038240
vdb-entry
-
securityfocus.com
/bid/97514
vdb-entry, third-party-advisory
Sources
- CVE List CVE-2017-0211
- NVD CVE-2017-0211
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.