CVE-2025-55694

Improper access control in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2025-55692

Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2025-55694

Improper access control in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2025-55692

Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2025-55694 Windows Error Reporting Service Elevation of Privilege Vulnerability

...

CVE-2025-55694 Windows Error Reporting Service Elevation of Privilege Vulnerability

...

CVE-2025-55694

CVE-2025-55694 affects the Windows Error Reporting service. The root cause is improper access control, enabling an authenticated local attacker to elevate privileges on affected Windows systems. Public documentation confirms the issue and links to Microsoft update guidance (KB5066780 and related ...

CVE-2025-55692

Technical details for CVE-2025-55692 are not publicly available in the provided documents. Monitor for updates from Microsoft, NVD, and the CVE list.

CVE-2025-55692 Windows Error Reporting Service Elevation of Privilege Vulnerability

...

CVE-2025-55692 Windows Error Reporting Service Elevation of Privilege Vulnerability

...

Windows Error Reporting Service Elevation of Privilege Vulnerability

Improper access control in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

Windows Error Reporting Service Elevation of Privilege Vulnerability

Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

PT-2025-42044

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An improper access control issue exists in Windows Error Reporting. This allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information...

PT-2025-42042

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A flaw exists in Windows Error Reporting due to improper input validation. This could allow an authorized attacker to gain elevated privileges on a local system. Recommendations At the moment...

Microsoft Azure Monitor Agent < 1.36.3 Elevation of Privilege (CVE-2025-59285)

The version of Microsoft Azure Monitor Agent installed on the remote host is prior to 1.36.3. It is, therefore, affected by a elevation of privilege vulnerability. Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. Note that Nessu...

Microsoft Windows Error Reporting 输入验证错误漏洞

Microsoft Windows Error Reporting WER is a component of Microsoft, Inc. enables users to notify Microsoft of application failures, kernel failures, unresponsive applications, and other application-specific issues. An input validation error vulnerability exists in Microsoft Windows Error Reporting...

Microsoft Windows Error Reporting 访问控制错误漏洞

Microsoft Windows Error Reporting WER is a component of Microsoft Corporation USA. enables users to notify Microsoft of application failures, kernel failures, unresponsive applications, and other application-specific issues. An Access Control Error vulnerability exists in Microsoft Windows Error...

Mozilla Firefox ESR < 115.29

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.29. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-82 advisory. - Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143...

Exploit for Path Traversal in Carel Pcoweb_Card_Firmware

CVE-2022-37122 Path Traversal Scanner !Bannerhttps://raw.g...

EUVD-2025-31849

The Chartify – WordPress Chart Plugin for WordPress is vulnerable to Missing Authentication for Critical Function in all versions up to, and including, 3.5.9. This is due to the plugin registering an unauthenticated AJAX action that dispatches to admin-class methods based on a request parameter,...