Microsoft Windows Error Reporting Privilege Escalation Vulnerability

A vulnerability allowing improper access control in the Windows Error Reporting service has been identified. This issue enables an authorized attacker to locally elevate privileges. The vulnerability affects multiple Windows 11 versions and Windows Server 2025, as well as Windows Server 2022, 23H2 Edition (Server Core installation)

Impact

Exploitation of this vulnerability could lead to unauthorized elevation of privileges, allowing an attacker to gain administrator rights.

Remediation

Users can download the security update for this vulnerability via the Microsoft Update Catalog. For Windows Server 2022, 23H2 Edition (Server Core installation), the security update is also available through the Microsoft Update Catalog.