CVE-2021-24090
HighCVSS 7.8Exploitation Probability (EPSS)
High risk87th percentile - higher than 87% of all known CVEs
Summary
Elevation of privilege vulnerability in Windows Error Reporting. Allows a local attacker to gain elevated privileges.
Risk Assessment
An attacker could gain administrative privileges, potentially leading to full system compromise.
Recommendation
Install the latest Windows security updates.
Other vulnerabilities in Windows Error Reporting
See all- CVE-2026-20817High
Improper handling of insufficient permissions in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
- CVE-2020-1088High
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when it handles and executes files. An attacker could exploit it by running a specially crafted application to gain greater access to sensitive information and system functionality.
- CVE-2020-1082High
Elevation of privilege vulnerability in Windows Error Reporting (WER) when WER handles and executes files. An attacker could gain greater access to sensitive information and system functionality.
- CVE-2020-1021High
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when it handles and executes files. An attacker could exploit it by running a specially crafted application to gain greater access to sensitive information and system functionality.
Original NVD description (English source)
Windows Error Reporting Elevation of Privilege Vulnerability