CVE-2023-36874

Published Jul 11, 2023

Last updated a month ago

Overview

Description
Windows Error Reporting Service Elevation of Privilege Vulnerability
Source
secure@microsoft.com
NVD status
Analyzed

Risk scores

CVSS 3.1

Type
Secondary
Base score
7.8
Impact score
5.9
Exploitability score
1.8
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity
HIGH

Known exploits

Data from CISA

Vulnerability name
Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability
Exploit added on
Jul 11, 2023
Exploit action due
Aug 1, 2023
Required action
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

Weaknesses

secure@microsoft.com
CWE-59
nvd@nist.gov
NVD-CWE-noinfo

Social media

Hype score
Not currently trending

Configurations