CVE-2023-36874

Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability

Published Jul 11, 2023 · updated Jun 16, 2026 · microsoft windows 10 1507

Microsoft Windows Error Reporting Service contains an unspecified vulnerability that allows for privilege escalation.

Timeline

Detection, updates, and resolution for this record.

Jul 11, 2023 · Catalog
Detected
Microsoft Windows Error Reporting Service contains an unspecified vulnerability that allows for privilege escalation.
Jul 11, 2023 · CISA KEV
Known exploited
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Aug 1, 2023 · CISA KEV
Remediation due
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Jun 16, 2026 · Catalog
Updated
Microsoft Windows Error Reporting Service contains an unspecified vulnerability that allows for privilege escalation.

Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

CISA due date Aug 1, 2023

CISA KEVCVE-2023-36874
Microsoft Windows Error Reporting Service contains an unspecified vulnerability that allows for privilege escalation.
cisa.gov
CVE.orgCVE-2023-36874
Official CVE identifier
cve.org
FIRST EPSSCVE-2023-36874
30-day exploitation probability 42.6%
first.org
Metasploit Modulesexploit_windows/local/win_error_cve_2023_36874
Public module reference (excellent). Module source is not copied into this catalog.
rapid7.com
NIST NVDCVE-2023-36874
Windows Error Reporting Service Elevation of Privilege Vulnerability
nvd.nist.gov
Packet Storm Securityhttp://packetstormsecurity.com/files/174843/Microsoft-Error-Reporting-Local-Privilege-Elevation.html
Packet Storm link already published on the finding.
packetstormsecurity.com