CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2019-05-16
Windows Error Reporting (WER) Elevation of Privilege Vulnerability (CVE-2019-0863) Technical Analysis and Mitigation Guide
[Affected Scope] Multiple versions of Windows operating systems, including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019
[Impact] A local attacker with low privileges can exploit the file handling mechanism of Windows Error Reporting (WER) to execute arbitrary code with SYSTEM privileges, leading to full system compromise
[Mitigation] Immediately apply the official Microsoft security patches, and monitor for unauthorized symbolic link creation or anomalous file writes in the WER directories