Windows Error Reporting Elevation of Privilege Vulnerability

<p>An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it.</p> <p>An attacker who successfully exploited the vulnerability could gain greater access to sensitive information and system functionality. To exploit the vulnerability, an attacker could run a specially crafted application.</p> <p>The security update addresses the vulnerability by correcting the way that WER handles and executes files.</p>

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L

N/A

Microsoft Windows WER 安全漏洞

Microsoft Windows是美国微软（Microsoft）公司的一种桌面操作系统。 Windows 错误报告 (WER) 存在安全漏洞。该漏洞允许攻击者可以获得对敏感信息和系统功能的更多访问权限。以下产品及版本受到影响： Windows 10 1909版本， Windows 10 1709版本， Windows Server 1909版本， Windows Server 2004版本， Windows Server 1903版本， Windows 10 2004版本， Windows 10 180

N/A

N/A