CVE-2023-36874 — Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability
CVE-2023-36874: Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability
CISA Known Exploited Vulnerability (KEV)
| Vendor / project | Microsoft |
| Product | Windows |
| Date added | 2023-07-11 |
| Due date | 2023-08-01 |
| Ransomware campaign use | Unknown |
Description
Microsoft Windows Error Reporting Service contains an unspecified vulnerability that allows for privilege escalation.
Required action (CISA)
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Notes
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-36874; https://nvd.nist.gov/vuln/detail/CVE-2023-36874
References
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-36874
- KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog