{"id":"CVE-2017-0211","aliases":["EUVD-2017-0577","GHSA-9vvv-8533-53p6"],"status":"published","title":"An elevation of privilege vulnerability exists in Windows 10, Windows 8.1, Windows RT 8.1,...","description":"An elevation of privilege vulnerability exists in Windows 10, Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 versions of Microsoft Windows OLE when it fails an integrity-level check, aka \"Windows OLE Elevation of Privilege Vulnerability.\"","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.14087,"percentile":0.96589,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-610"],"published":"2017-04-12T14:00:00Z","modified":"2026-06-17T00:57:16Z","exploits":[{"source":"exploitdb","id":"EDB-41902","title":"Microsoft Windows 10 - Runtime Broker ClipboardBroker Privilege Escalation","type":"local","platform":"windows","date":"2017-04-20","verified":true,"url":"https://www.exploit-db.com/exploits/41902"}],"products":[{"vendor":"microsoft","product":"windows_10"},{"vendor":"microsoft","product":"windows_8.1"},{"vendor":"microsoft","product":"windows_rt_8.1"},{"vendor":"microsoft","product":"windows_server_2012"},{"vendor":"microsoft","product":"windows_server_2016"},{"vendor":"microsoft corporation","product":"windows ole"}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0211","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/41902/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"http://www.securitytracker.com/id/1038240","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.securityfocus.com/bid/97514","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-0211"},{"url":"https://www.exploit-db.com/exploits/41902"},{"url":"https://github.com/advisories/GHSA-9vvv-8533-53p6"}],"sources":{"cve":[{"id":"CVE-2017-0211","description":"An elevation of privilege vulnerability exists in Windows 10, Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 versions of Microsoft Windows OLE when it fails an integrity-level check, aka \"Windows OLE Elevation of Privilege Vulnerability.\"","status":"published","published":"2017-04-12T14:00:00Z","modified":"2024-08-05T12:55:19.204Z","updated_at":"2026-11-02T14:33:22.381225Z"}],"euvd":[{"id":"EUVD-2017-0577","description":"An elevation of privilege vulnerability exists in Windows 10, Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 versions of Microsoft Windows OLE when it fails an integrity-level check, aka \"Windows OLE Elevation of Privilege Vulnerability.\"","status":"published","published":"2017-04-12T14:00:00Z","modified":"2024-08-05T12:55:19Z","updated_at":"2026-11-03T02:39:24.815554Z"}],"ghsa":[{"id":"GHSA-9vvv-8533-53p6","title":"An elevation of privilege vulnerability exists in Windows 10, Windows 8.1, Windows RT 8.1,...","description":"An elevation of privilege vulnerability exists in Windows 10, Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 versions of Microsoft Windows OLE when it fails an integrity-level check, aka \"Windows OLE Elevation of Privilege Vulnerability.\"","status":"published","published":"2022-05-13T01:39:50Z","modified":"2025-04-20T03:36:55Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-610"],"updated_at":"2026-11-02T15:01:44.663713Z"}],"nvd":[{"id":"CVE-2017-0211","description":"An elevation of privilege vulnerability exists in Windows 10, Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 versions of Microsoft Windows OLE when it fails an integrity-level check, aka \"Windows OLE Elevation of Privilege Vulnerability.\"","status":"published","published":"2017-04-12T14:59:01.453Z","modified":"2026-06-17T00:57:16.717Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-610"],"updated_at":"2026-11-02T14:03:44.86906Z"}]}}