Summary
Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.
Details
What privileges could be gained by an attacker who successfully exploited the vulnerability?
An attacker who successfully exploited this vulnerability could gain administrator privileges.
According to the CVSS metrics, the attack vector is local (AV:L) and privilege required is low (PR:L). What does that mean for this vulnerability?
An attacker must have local access to the targeted machine and must be able to create folders and performance traces on the machine, with restricted privileges that normal users have by default.
Security updates
10.0.17763.4645 — https://support.microsoft.com/help/5028168
10.0.20348.1850 — https://support.microsoft.com/help/5028171
10.0.22000.2176 — https://support.microsoft.com/help/5028182
10.0.19044.3208 — https://support.microsoft.com/help/5028166
10.0.22621.1992 — https://support.microsoft.com/help/5028185
10.0.10240.20048 — https://support.microsoft.com/help/5028186
10.0.14393.6085 — https://support.microsoft.com/help/5028169
6.0.6003.22175 — https://support.microsoft.com/help/5028222
6.0.6003.22175 — https://support.microsoft.com/help/5028226
6.1.7601.26623 — https://support.microsoft.com/help/5028240
6.2.9200.24374 — https://support.microsoft.com/help/5028232
6.2.9200.24374 — https://support.microsoft.com/help/5028233
6.3.9600.21063 — https://support.microsoft.com/help/5028228
6.3.9600.21075 — https://support.microsoft.com/help/5028223
Vulnerabilities 1
-
High 7.8
Windows Error Reporting Service Elevation of Privilege Vulnerability
Windows Error Reporting Service Elevation of Privilege Vulnerability
KEV Jul 11, 2023
Revision history
-
#1
Information published.
References
-
CVE-2023-36874 Windows Error Reporting Service Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36874
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss