Executive brief
Windows Error Reporting is a system component that collects and reports crash and error information to Microsoft. An authorized attacker with local access can exploit insecure permissions on temporary files created by this service to tamper with error reports or potentially execute unauthorized actions on the system.
Technical details
This vulnerability involves a temporary file creation flaw in Windows Error Reporting where temporary files are created in a directory with insufficiently restrictive permissions. An authorized local attacker can access or modify these temporary files, potentially tampering with error data or using the writable location for privilege escalation. The vulnerability requires local system access but does not require elevated privileges. A patch from Microsoft is expected to be available through standard Windows update channels.
Affected products
- Microsoft Windows
Timeline
- 2026-09-08: disclosed