Executive brief
Windows Error Reporting is a system component that captures and reports application failures to Microsoft. A heap-based buffer overflow in this component allows an authorized local attacker to execute arbitrary code with elevated privileges, potentially compromising the entire system.
Technical details
A heap-based buffer overflow vulnerability exists in Windows Error Reporting, a core Windows system component responsible for collecting and transmitting crash diagnostic data. The flaw allows an authenticated local attacker to overflow a heap buffer, achieving code execution with elevated privileges. Exploitation requires local access and prior authorization on the system. A successful exploit enables privilege escalation from the attacker's current privilege level to a higher level, potentially SYSTEM. Patches are expected to be available from Microsoft.
Affected products
- Microsoft Windows Error Reporting <UNKNOWN>
Timeline
- 2026-09-08: disclosed