Executive brief
Windows Error Reporting is a built-in Windows service that collects and reports system crashes and errors to Microsoft. An authorized attacker with local system access can exploit an out-of-bounds read vulnerability in this service to elevate their privileges and gain full administrative control of the affected computer.
Technical details
The vulnerability is an out-of-bounds read condition in the Windows Error Reporting component. It requires an attacker to already have authorized local access to the system (either as a standard user or through prior compromise). By crafting malicious input or triggering specific error conditions, the attacker can read memory outside the allocated buffer, potentially exposing sensitive data or enabling privilege escalation through information disclosure. The attack is local and does not require network access or elevation of privileges beforehand—the attacker must already be authenticated on the system.
Affected products
- Microsoft Windows multiple versions
Timeline
- 2026-09-08: disclosed