coldbraid

CVE-2019-0863 Microsoft Windows

Microsoft Windows Error Reporting (WER) contains a privilege escalation vulnerability due to the way it handles files, allowing for code execution in kernel mode.

CVSS
not scored

On CISA’s exploited list

Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability

Added
2021-11-03
Federal patch deadline
2022-05-03
Ransomware use
not known