CVE-2026-69450
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
Risk Assessment
A local attacker with privileges could gain higher privileges, potentially leading to disclosure of sensitive information.
Recommendation
Apply the latest Windows security updates.
Other vulnerabilities in Windows Error Reporting
See all- CVE-2026-97815Critical
Windows Error Reporting is affected by a heap-based buffer overflow vulnerability. This allows an unauthorized attacker to execute code over a network.
- CVE-2026-83748Critical
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
- CVE-2026-83693Critical
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
- CVE-2026-83519Critical
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
- CVE-2026-20817High
Improper handling of insufficient permissions in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
- CVE-2019-0863HighActively exploited
An elevation of privilege vulnerability in Windows Error Reporting (WER), due to improper file handling. A local attacker could exploit this to gain elevated privileges.
- CVE-2026-97798High
Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
- CVE-2026-85800High
A heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
- CVE-2026-85354High
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
- CVE-2026-83916High
Double free in Windows Error Reporting allows an authorized attacker to execute code locally.
Original NVD description (English source)
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS