Actively exploited in the wild
Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2024-06-13. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
CVE-2024-26169
HighCVSS 7.8KEVSummary
Windows Error Reporting Service Elevation of Privilege Vulnerability. Technical details are not provided in the description.
Risk Assessment
A local attacker could elevate their privileges on a Windows system, potentially leading to full system compromise.
Recommendation
Apply Microsoft security updates for Windows that address this vulnerability.
Other vulnerabilities in Windows Error Reporting Service
Original NVD description (English source)
Windows Error Reporting Service Elevation of Privilege Vulnerability

