Microsoft Windows COM Local Privilege Escalation Vulnerability(CVE-2017-0213)

Summary: When accessing an OOP COM object using IRemUnknown2 the local unmarshaled proxy can be for a different interface to that requested by QueryInterface resulting in a type confusion which can result in EoP. Description: Querying for an IID on a OOP or remote COM object calls the ORPC method...