CVE-2020-0753-and-CVE-2020-0754

Writeup and POC for CVE-2020-0753, CVE-2020-0754 and six unfixed Window DOS Vulnerabilities Exploit FileSystem race condition bug - analysis of CVE-2020-0753 and CVE-2020-0754 Windows Error Reporting service has fixed 2 Elevation of Privilege bugs in last Patch Tuesday, the two bugs are assigned...

CVE-2020-0753-and-CVE-2020-0754

Writeup and POC for CVE-2020-0753, CVE-2020-0754 and six fixed Window DOS Vulnerabilities Exploit FileSystem race condition bug - analysis of CVE-2020-0753 and CVE-2020-0754 Windows Error Reporting service has fixed 2 Elevation of Privilege bugs in last Patch Tuesday, the two bugs are assigned wi...

CVE-2023-36874

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ CVE-2023-36874...

CVE-2023-36874_BOF

CVE-2023-36874 Windows Error Reporting LPE BOF Introduction This is a mature and operational CobaltStrike BOF implementation of Filip Dragovic's @filipdragovic CVE-2023-36874 Windows Error Reporting LPE exploit. He did the heavy lifting in terms of creating a working exploit by reversing the...

CVE-2023-36874

CVE-2023-36874 For demonstration purposes only. Exploit works on vulnerable Windows clients/servers. Compile code and create c:\test\system32 directories. Place your wermgr.exe in that directory and run compiled PoC...

CVE-2019-1315

Windows Error Reporting Manager arbitrary file move Elevation of Privilege Details: https://offsec.almond.consulting/windows-error-reporting-arbitrary-file-move-eop.html You will need the NtApiDotNet library to run it, as well as a valid Report.wer file, both to be placed in the same directory as...

DirCreate2System

DirCreate2System Weaponizing to get NT AUTHORITY\SYSTEM for Privileged Directory Creation Bugs with Windows Error Reporting Short Description: I've discovered comctl32.dll which is missing in system dir which doesn't really exist has been loaded by wermgr.exe via windows error reporting by runnin...

CVE-2026-97798-exploit

CVE-2026-97798 — Windows Error Reporting argument injection to SYSTEM !WARNING This repository is for authorized vulnerability research and controlled lab validation. The proof of concept fails closed when it cannot identify exactly one compatible faultrep.dll!SpawnDataCollector implementation...

Lsass-Shtinkering

Lsass Shtinkering New method of dumping LSASS by abusing the Windows Error Reporting service. It sends a message to the service with the ALPC protocol to report an exception on LSASS. This report will cause the service to dump the memory of LSASS. Prerequisites The registry value "DumpType" under...

CVE-2026-96153

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-95947

An elevation of privilege vulnerability exists in Windows Error Reporting WER when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it. An attacker who successfully exploited the vulnerability could gain greater access to...

CVE-2026-94525

An elevation of privilege vulnerability exists in Windows Error Reporting WER when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it. An attacker who successfully exploited the vulnerability could gain greater access to...

CVE-2026-85862

Double free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-105540

Incorrect resource transfer between spheres in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-105540

A vulnerability in Windows Error Reporting (CWE-669) allows an authorized attacker to elevate privileges locally due to an incorrect resource transfer between spheres . The vulnerability has a CVSS 3.1 base score of 7.0 (High) . While the provided documents confirm the existence of the vulnerabil...

EUVD-2026-122032

Incorrect resource transfer between spheres in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-96153

A heap-based buffer overflow vulnerability exists in Windows Error Reporting , which may allow an authorized attacker to achieve local privilege escalation . While the provided documents confirm the existence of this vulnerability and the impact of privilege elevation, specific details regarding ...

EUVD-2026-121812

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

EUVD-2026-121737

An elevation of privilege vulnerability exists in Windows Error Reporting WER when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it. An attacker who successfully exploited the vulnerability could gain greater access to...

CVE-2026-94525

An elevation of privilege vulnerability exists in Windows Error Reporting (WER) during the handling and execution of files. A local attacker could exploit this by running a specially crafted application to gain greater access to sensitive information and system functionality. The vulnerability is...