CVE-2023-36874: Microsoft Windows Error Reporting Service Privilege

Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability. Microsoft Windows Error Reporting Service contains an unspecified vulnerability that allows for privilege escalation.

• CISA KEV-listed (remediation due 2023-08-01)
• EPSS 70.2% (98.7% percentile)

Detection rules

• Potential CVE-2023-36874 Exploitation - Uncommon Report.Wer Location medium
• Potential CVE-2023-36874 Exploitation - Fake Wermgr.Exe Creation high
• Potential CVE-2023-36874 Exploitation - Fake Wermgr Execution high

Browse the CVE database

Read the full analysis on IntelFusions