Actively exploited in the wild
Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2022-03-15. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2019-1315
HighCVSS 7.8KEVSummary
An elevation of privilege vulnerability exists in Windows Error Reporting Manager due to improper handling of hard links, known as 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'.
Risk Assessment
A local attacker could exploit this to gain elevated privileges, potentially leading to full compromise of the affected system.
Recommendation
Apply the Microsoft security updates for Windows that address this vulnerability as soon as possible.
Other vulnerabilities in Windows Error Reporting Manager
Original NVD description (English source)
An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1339, CVE-2019-1342.