7.8

CVE-2023-36874

Warnung
Exploit

Windows Error Reporting Service Elevation of Privilege Vulnerability

Windows Error Reporting Service Elevation of Privilege Vulnerability
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Windows 10 1507 Version < 10.0.10240.20048
Microsoft ≫ Windows 10 1607 HwPlatform x64 Version < 10.0.14393.6085
Microsoft ≫ Windows 10 1607 HwPlatform x86 Version < 10.0.14393.6085
Microsoft ≫ Windows 10 1809 Version < 10.0.17763.4645
Microsoft ≫ Windows 10 1809 HwPlatform arm64 Version < 10.0.17763.4645
Microsoft ≫ Windows 10 1809 HwPlatform x64 Version < 10.0.17763.4645
Microsoft ≫ Windows 10 1809 HwPlatform x86 Version < 10.0.17763.4645
Microsoft ≫ Windows 10 21h2 Version < 10.0.19041.3208
Microsoft ≫ Windows 10 22h2 Version < 10.0.19045.3208
Microsoft ≫ Windows 11 21h2 Version < 10.0.22000.2176
Microsoft ≫ Windows 11 22h2 Version < 10.0.22621.1992
Microsoft ≫ Windows Server 2008 Version - Update sp2
Microsoft ≫ Windows Server 2008 Version r2 Update sp1 HwPlatform x64
Microsoft ≫ Windows Server 2016 Version < 10.0.14393.6085
Microsoft ≫ Windows Server 2019 Version < 10.0.17763.4645
Microsoft ≫ Windows Server 2022 Version < 10.0.20348.1850

11.07.2023: CISA Known Exploited Vulnerabilities (KEV) Catalog

Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability

Schwachstelle

Microsoft Windows Error Reporting Service contains an unspecified vulnerability that allows for privilege escalation.

Beschreibung

Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 43.41% 0.986
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Microsoft 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-59 Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36874
Patch
Vendor Advisory
http://packetstormsecurity.com/files/174843/Microsoft-Error-Reporting-Local-Privilege-Elevation.html
Third Party Advisory
Exploit
VDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-36874
US Government Resource