PT-2019-2171

CVE-2019-0863

Publicado

2019-05-14

Atualizado

2026-03-01

Descrição por

CVSS 3.1

7.8

Alta

MétricasAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Windows Error Reporting (WER) (affected versions not specified)

Description An elevation of privilege issue exists in the way Windows Error Reporting (WER) handles files. This vulnerability is related to insufficient access restrictions in the Windows Error Reporting service. Exploitation of this issue may allow an attacker to execute arbitrary code in kernel mode.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Explorabilidade

Exploit

Pesquisadores

Gal De Leon

Polar Bear

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-264

Identificadores relacionados

CVE-2019-0863