Windows Error Reporting Manager Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash. An attacker who successfully exploited this vulnerability could delete a targeted file leading to an elevated status. To exploit this vulnerability, an attacker would first have...

PT-2020-4331 · Microsoft · Windows Error Reporting +1

Name of the Vulnerable Software and Affected Versions: Windows Error Reporting WER affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Windows Error Reporting WER when it handles and executes files. This could allow an attacker to gain...

PT-2020-4309 · Microsoft · Windows Error Reporting Manager +1

Name of the Vulnerable Software and Affected Versions: Windows Error Reporting Manager affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Error Reporting Manager, allowing an attacker to potentially elevate their privileges by...

PT-2020-4338 · Microsoft · Windows Error Reporting +1

Name of the Vulnerable Software and Affected Versions: Windows Error Reporting WER affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Windows Error Reporting WER when it handles and executes files. This could allow an attacker to gain...

KB4579311: Windows 10 Version 2004 October 2020 Security Update

The remote Windows host is missing security update 4579311. It is, therefore, affected by multiple vulnerabilities : - A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and...

OceanLotus hackers injecting malware in Windows error report

By Waqas OceanLotus is a Vietnamese APT32 group previously known for targeting Android and Mac devices with malware. This is a post from HackRead.com Read the original post: OceanLotus hackers injecting malware in Windows error report...

APT Attack Injects Malware into Windows Error Reporting

A campaign that injects malware into the Windows Error Reporting WER service to evade detection is potentially the work of a Vietnamese APT group, researchers said. The attack, discovered on Sept. 17 by researchers at Malwarebytes Threat Intelligence Team, lures its victims with a phishing campai...

Release the Kraken: Fileless injection into Windows Error Reporting service

This blog post was authored by Hossein Jazi and Jérôme Segura. On September 17th, we discovered a new attack called Kraken that injected its payload into the Windows Error Reporting WER service as a defense evasion mechanism. That reporting service, WerFault.exe, is usually invoked when an error...

The vulnerability of the Windows Error Reporting error reporting service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Error Reporting error reporting service in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Windows Error Reporting error reporting service allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Error Reporting error reporting service in the Windows operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Microsoft Windows Error Reporting Manager Elevation of Privilege Vulnerability (CNVD-2020-52921)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows Error Reporting Manage...

Microsoft Windows Error Reporting Information Disclosure Vulnerability (CNVD-2020-40877)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An information disclosure vulnerability exists in Microsoft Windows Error Reporting that...

The vulnerability of the psmsrv.dll library in the Windows operating system allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the psmsrv.dll library in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code using a specially created application...

CVE-2020-1429

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'...

CVE-2020-1429

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'...

CVE-2020-1420

An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Error Reporting Information Disclosure Vulnerability'...

CVE-2020-1420

An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Error Reporting Information Disclosure Vulnerability'...

Information disclosure

An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Error Reporting Information Disclosure Vulnerability'...

Privilege escalation

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'...

CVE-2020-1429

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'...