Description
Microsoft Windows Error Reporting Service contains an improper privilege management vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.
Recommended action
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
CISA remediation due date for U.S. federal agencies: 4 Jul 2024.
Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.