CVE-2026-20817

CVE-2026-20817 - Escalação de Privilégios ALPC no Windows Error Reporting WER Descrição Este repositório contém uma Prova de Conceito PoC para CVE-2026-20817 , uma vulnerabilidade de escalação local de privilégios no serviço Windows Error Reporting WER. A vulnerabilidade permite que um usuário...

CVE-2020-0753-and-CVE-2020-0754

Writeup und Proof-of-Concept für CVE-2020-0753, CVE-2020-0754 und sechs ungefixte Window-DOS-Sicherheitslücken Exploit eines FileSystem-Race-Condition-Bugs – Analyse von CVE-2020-0753 und CVE-2020-0754 Der Windows-Fehlerberichterstattungsdienst hat im letzten Patch Tuesday zwei...

CVE-2023-36874

CVE-2023-36874 Proof of Concept PoC Eine pädagogische und defensiv ausgerichtete Forschungsimplementierung der CVE-2023-36874 -Schwachstelle, die eine lokale Privilegienausweitung Local Privilege Escalation, LPE innerhalb der Windows-Fehlerberichterstattung Windows Error Reporting, WER...

CVE-2020-0753-and-CVE-2020-0754

Writeup und POC für CVE-2020-0753, CVE-2020-0754 und sechs behobene Windows-DOS-Sicherheitslücken Exploit des FileSystem-Race-Condition-Bugs – Analyse von CVE-2020-0753 und CVE-2020-0754 Der Windows Error Reporting-Dienst hat im letzten Patch Tuesday zwei Privilegienausweitungs-Bugs behoben. Die...

CVE-2019-1315

Windows Error Reporting Manager – Erweiterung von Berechtigungen durch beliebiges Verschieben von Dateien Details: https://offsec.almond.consulting/windows-error-reporting-arbitrary-file-move-eop.html Sie benötigen die NtApiDotNet-Bibliothek sowie eine gültige Report.wer-Datei. Beide müssen sich ...

CVE-2023-36874

🇮🇱 RiportateliACasa MaiPiùOra 🇮🇱 Chiediamo il ritorno sicuro di tutti i cittadini presi in ostaggio dal gruppo terroristico Hamas. Non ci fermeremo finché ogni ostaggio non sarà rilasciato e non tornerà a casa sano e salvo. Puoi aiutarci a riportarli a casa.https://stories.bringthemhomenow.net/...

CVE-2023-36874_BOF

CVE-2023-36874 Windows Error Reporting LPE BOF Introdução Esta é uma implementação madura e operacional de BOF do CobaltStrike do exploit LPE do Windows Error Reporting CVE-2023-36874 de Filip Dragovic @filipdragovic. Ele fez o trabalho pesado ao criar um exploit funcional realizando engenharia...

CVE-2023-36874

CVE-2023-36874 Nur zu Demonstrationszwecken. Der Exploit funktioniert auf anfälligen Windows-Clients/Servern. Kompilieren Sie den Code und erstellen Sie das Verzeichnis c:\test\system32. Platzieren Sie Ihre wermgr.exe in diesem Verzeichnis und führen Sie den kompilierten PoC aus...

Lsass-Shtinkering

Lsass Shtinkering Nuovo metodo per effettuare il dump di LSASS abusando del servizio Windows Error Reporting. Invia un messaggio al servizio tramite il protocollo ALPC per segnalare un'eccezione su LSASS. Questo report farà sì che il servizio esegua il dump della memoria di LSASS. Prerequisiti Il...

DirCreate2System

DirCreate2System Transformando em arma para obter NT AUTHORITY\SYSTEM por meio de bugs de criação de diretórios privilegiados com o Windows Error Reporting Descrição resumida: Descobri que comctl32.dll que está ausente no diretório do sistema, que na verdade não existe foi carregada por wermgr.ex...

Cloud Files Security Review Tool

This code performs a defensive security assessment of Windows systems by reviewing configuration elements associated with Cloud Files components, environment manipulation opportunities, temporary file exposure, and Windows Error Reporting artifacts...

The vulnerability of the Windows Error Reporting Service’s error reporting mechanism allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Error Reporting Service’s error reporting mechanism is related to improper handling of insufficient permissions or privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2026-20817

Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-20817

Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-20817

Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-20817

CVE-2026-20817 is described as an elevation-of-privilege vulnerability in Windows Error Reporting caused by improper handling of insufficient permissions. The entry lists local privilege escalation with high impact ( Confidentiality/Integrity/Availability = High) and a CVSS v3.1 base score of 7.8...

CVE-2026-20817 Windows Error Reporting Service Elevation of Privilege Vulnerability

...

CVE-2026-20817

Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-20817 Windows Error Reporting Service Elevation of Privilege Vulnerability

...

Windows Error Reporting Service Elevation of Privilege Vulnerability

Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges locally...