CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows Error Reporting (WER) Service Elevation of Privilege Vulnerability (CVE-2024-26169) Analysis and Mitigation Guide
[Affected Scope] Broad range of Windows operating systems including Windows 10, 11, and Windows Server 2008 through 2022
[Impact] Local authenticated attackers can execute arbitrary code with SYSTEM privileges, leading to complete system compromise
[Mitigation] Immediately apply Microsoft official security patches and monitor for anomalous child processes spawned by the WER service
Windows Error Reporting (WER) Local Privilege Escalation Vulnerability (CVE-2023-36874) Analysis and Mitigation Guide
[Affected Scope] Most major versions of Windows operating systems, including Windows 10, 11, and Windows Server 2008 through 2022
[Impact] A local authenticated attacker with low privileges can manipulate file system links to execute arbitrary code with SYSTEM privileges, leading to full system compromise
[Mitigation] Immediately apply the latest cumulative security updates provided by Microsoft, or temporarily disable the WER service and restrict file link creation privileges