Skip to content
OpenAdvisories
High 1 exploited CVE MSRC-CVE-2023-36874 1 CVE

Windows Error Reporting Service Elevation of Privilege Vulnerability

Published Jul 11, 2023 · Updated Jul 11, 2023

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

Details

What privileges could be gained by an attacker who successfully exploited the vulnerability?
An attacker who successfully exploited this vulnerability could gain administrator privileges.

According to the CVSS metrics, the attack vector is local (AV:L) and privilege required is low (PR:L). What does that mean for this vulnerability?
An attacker must have local access to the targeted machine and must be able to create folders and performance traces on the machine, with restricted privileges that normal users have by default.

Security updates
10.0.17763.4645 — https://support.microsoft.com/help/5028168
10.0.20348.1850 — https://support.microsoft.com/help/5028171
10.0.22000.2176 — https://support.microsoft.com/help/5028182
10.0.19044.3208 — https://support.microsoft.com/help/5028166
10.0.22621.1992 — https://support.microsoft.com/help/5028185
10.0.10240.20048 — https://support.microsoft.com/help/5028186
10.0.14393.6085 — https://support.microsoft.com/help/5028169
6.0.6003.22175 — https://support.microsoft.com/help/5028222
6.0.6003.22175 — https://support.microsoft.com/help/5028226
6.1.7601.26623 — https://support.microsoft.com/help/5028240
6.2.9200.24374 — https://support.microsoft.com/help/5028232
6.2.9200.24374 — https://support.microsoft.com/help/5028233
6.3.9600.21063 — https://support.microsoft.com/help/5028228
6.3.9600.21075 — https://support.microsoft.com/help/5028223

Vulnerabilities 1

Revision history

  1. #1

    Information published.

References