CVE-2026-69436: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69362: Use After Free

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

PT-2026-87655

Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally...

Exploit for Link Following in Microsoft

CVE-2023-36874 Proof of Concept PoC An educational and defe...

Cloud Files Security Review Tool

This code performs a defensive security assessment of Windows systems by reviewing configuration elements associated with Cloud Files components, environment manipulation opportunities, temporary file exposure, and Windows Error Reporting artifacts...

The vulnerability of the Windows Error Reporting Service’s error reporting mechanism allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Error Reporting Service’s error reporting mechanism is related to improper handling of insufficient permissions or privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2026-20817

Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-20817

Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-20817

Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-20817 Windows Error Reporting Service Elevation of Privilege Vulnerability

...

CVE-2026-20817

CVE-2026-20817 is described as an elevation-of-privilege vulnerability in Windows Error Reporting caused by improper handling of insufficient permissions. The entry lists local privilege escalation with high impact ( Confidentiality/Integrity/Availability = High) and a CVSS v3.1 base score of 7.8...

CVE-2026-20817 Windows Error Reporting Service Elevation of Privilege Vulnerability

...

CVE-2026-20817

Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

Windows Error Reporting Service Elevation of Privilege Vulnerability

Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

PT-2026-2667

Name of the Vulnerable Software and Affected Versions Windows Error Reporting versions prior to January 2026 Description Improper handling of permissions in the Windows Error Reporting WER service allows an authorized local attacker to elevate privileges to NT AUTHORITYSYSTEM. The issue exists in...

Microsoft Windows Error Reporting 安全漏洞

Microsoft Windows Error Reporting WER is a component of Microsoft Corporation USA. It enables users to notify Microsoft of application failures, kernel failures, unresponsive applications, and other application-specific problems. A security vulnerability exists in Microsoft Windows Error Reportin...

CVE-2026-20817: Improper Handling of Insufficient Permissions or Privileges

Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2025-11964 OOBW in utf_16le_to_utf_8_truncated() in libpcap

On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf16letoutf8truncated can write data beyond the end of the provided buffer...

The vulnerability of the Windows Error Reporting error reporting service allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Error Reporting error reporting service in the Windows operating system is related to lack of access control. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows Error Reporting Service’s error reporting mechanism allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Error Reporting Service’s error reporting mechanism is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...