CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows Error Reporting (WER) Service Elevation of Privilege Vulnerability (CVE-2024-26169) Analysis and Mitigation Guide
[Affected Scope] Broad range of Windows operating systems including Windows 10, 11, and Windows Server 2008 through 2022
[Impact] Local authenticated attackers can execute arbitrary code with SYSTEM privileges, leading to complete system compromise
[Mitigation] Immediately apply Microsoft official security patches and monitor for anomalous child processes spawned by the WER service
Windows Error Reporting (WER) Local Privilege Escalation Vulnerability (CVE-2023-36874) Analysis and Mitigation Guide
[Affected Scope] Most major versions of Windows operating systems, including Windows 10, 11, and Windows Server 2008 through 2022
[Impact] A local authenticated attacker with low privileges can manipulate file system links to execute arbitrary code with SYSTEM privileges, leading to full system compromise
[Mitigation] Immediately apply the latest cumulative security updates provided by Microsoft, or temporarily disable the WER service and restrict file link creation privileges
Windows Error Reporting (WER) Hard Link Elevation of Privilege Vulnerability (CVE-2019-1315)
[Affected Scope] Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019 with Windows Error Reporting (WER) enabled
[Impact] A local attacker can exploit hard links to overwrite or manipulate arbitrary system files, leading to arbitrary code execution with SYSTEM privileges
[Mitigation] Immediately apply the official Microsoft security patches and restrict local write permissions on temporary directories prior to patching
Windows Error Reporting (WER) Elevation of Privilege Vulnerability (CVE-2019-0863) Technical Analysis and Mitigation Guide
[Affected Scope] Multiple versions of Windows operating systems, including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019
[Impact] A local attacker with low privileges can exploit the file handling mechanism of Windows Error Reporting (WER) to execute arbitrary code with SYSTEM privileges, leading to full system compromise
[Mitigation] Immediately apply the official Microsoft security patches, and monitor for unauthorized symbolic link creation or anomalous file writes in the WER directories