PT-2019-2171

CVE-2019-0863

Published

2019-05-14

Updated

2026-03-01

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Windows Error Reporting (WER) (affected versions not specified)

Description An elevation of privilege issue exists in the way Windows Error Reporting (WER) handles files. This vulnerability is related to insufficient access restrictions in the Windows Error Reporting service. Exploitation of this issue may allow an attacker to execute arbitrary code in kernel mode.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Researchers

Gal De Leon

Polar Bear

Vendors

Affected products

Weakness enumeration

CWE-264

Related identifiers

CVE-2019-0863