Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability
Microsoft · Windows
Date added (CISA)
2024-06-13
Remediation due
2024-07-04
Known ransomware use
Yes
Remediation priority
P1 — known ransomware use · past CISA due date
Description
Microsoft Windows Error Reporting Service contains an improper privilege management vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.