CVE-2023-36874

Windows Error Reporting Service Elevation of Privilege Vulnerability

CVSS

No CVSS.

References

Link	Resource
http://packetstormsecurity.com/files/174843/Microsoft-Error-Reporting-Local-Privilege-Elevation.html	Exploit Third Party Advisory VDB Entry
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36874	Patch Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36874	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:::::x64:*
	cpe:2.3:o:microsoft:windows_server_2012:r2:::::::*
	cpe:2.3:o:microsoft:windows_server_2008:-:sp2::::::
	cpe:2.3:o:microsoft:windows_server_2012:-:::::::*
	cpe:2.3:o:microsoft:windows_10_1809::::::::
	cpe:2.3:o:microsoft:windows_11_21h2::::::::
	cpe:2.3:o:microsoft:windows_10_21h2::::::::
	cpe:2.3:o:microsoft:windows_11_22h2::::::::
	cpe:2.3:o:microsoft:windows_10_22h2::::::::
	cpe:2.3:o:microsoft:windows_10_1507::::::::
	cpe:2.3:o:microsoft:windows_10_1809:::::::arm64:*
	cpe:2.3:o:microsoft:windows_10_1809:::::::x64:*
	cpe:2.3:o:microsoft:windows_10_1809:::::::x86:*
	cpe:2.3:o:microsoft:windows_10_1607:::::::x64:*
	cpe:2.3:o:microsoft:windows_10_1607:::::::x86:*
	cpe:2.3:o:microsoft:windows_server_2016::::::::
	cpe:2.3:o:microsoft:windows_server_2019::::::::
	cpe:2.3:o:microsoft:windows_server_2022::::::::

History

23 Jan 2025, 18:53

Type	Values Removed	Values Added
CPE	cpe:2.3:o:microsoft:windows_server_2019:-:::::::* cpe:2.3:o:microsoft:windows_10_1607:::::::: cpe:2.3:o:microsoft:windows_server_2022:-:::::::* cpe:2.3:o:microsoft:windows_server_2016:-:::::::*	cpe:2.3:o:microsoft:windows_server_2022:::::::: cpe:2.3:o:microsoft:windows_server_2019:::::::: cpe:2.3:o:microsoft:windows_10_1809:::::::arm64:* cpe:2.3:o:microsoft:windows_10_1607:::::::x64:* cpe:2.3:o:microsoft:windows_10_1607:::::::x86:* cpe:2.3:o:microsoft:windows_server_2016:::::::: cpe:2.3:o:microsoft:windows_10_1809:::::::x64:* cpe:2.3:o:microsoft:windows_10_1809:::::::x86:*

01 Jan 2025, 02:16

Type	Values Removed	Values Added
References	~~(MISC) http://packetstormsecurity.com/files/174843/Microsoft-Error-Reporting-Local-Privilege-Elevation.html - Exploit, Third Party Advisory, VDB Entry~~	() http://packetstormsecurity.com/files/174843/Microsoft-Error-Reporting-Local-Privilege-Elevation.html - Exploit, Third Party Advisory, VDB Entry
References	~~(MISC) https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36874 - Patch, Vendor Advisory~~	() https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36874 - Patch, Vendor Advisory
CVSS	v2 : ~~unknown~~ v3 : ~~7.8~~	v2 : unknown v3 : unknown

27 Jun 2024, 19:00

Type	Values Removed	Values Added
References	~~(MISC) http://packetstormsecurity.com/files/174843/Microsoft-Error-Reporting-Local-Privilege-Elevation.html -~~	(MISC) http://packetstormsecurity.com/files/174843/Microsoft-Error-Reporting-Local-Privilege-Elevation.html - Exploit, Third Party Advisory, VDB Entry

29 May 2024, 03:16

Type	Values Removed	Values Added
References		(MISC) http://packetstormsecurity.com/files/174843/Microsoft-Error-Reporting-Local-Privilege-Elevation.html -

19 Jul 2023, 00:18

Type	Values Removed	Values Added
First Time		Microsoft windows Server 2008 Microsoft windows 10 1607 Microsoft windows 10 1809 Microsoft windows Server 2012 Microsoft Microsoft windows Server 2016 Microsoft windows Server 2019 Microsoft windows 10 21h2 Microsoft windows 11 21h2 Microsoft windows 10 22h2 Microsoft windows 11 22h2 Microsoft windows 10 1507 Microsoft windows Server 2022
CPE		cpe:2.3:o:microsoft:windows_server_2022:-:::::::* cpe:2.3:o:microsoft:windows_10_22h2:::::::: cpe:2.3:o:microsoft:windows_10_1507:::::::: cpe:2.3:o:microsoft:windows_11_22h2:::::::: cpe:2.3:o:microsoft:windows_server_2019:-:::::::* cpe:2.3:o:microsoft:windows_server_2008:-:sp2:::::: cpe:2.3:o:microsoft:windows_server_2012:-:::::::* cpe:2.3:o:microsoft:windows_10_1607:::::::: cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:::::x64:* cpe:2.3:o:microsoft:windows_10_1809:::::::: cpe:2.3:o:microsoft:windows_server_2012:r2:::::::* cpe:2.3:o:microsoft:windows_server_2016:-:::::::* cpe:2.3:o:microsoft:windows_11_21h2:::::::: cpe:2.3:o:microsoft:windows_10_21h2::::::::
CWE		NVD-CWE-noinfo
References	~~(MISC) https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36874 -~~	(MISC) https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36874 - Patch, Vendor Advisory

11 Jul 2023, 18:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-07-11 18:15

Updated : 2025-01-23 18:53

NVD link : CVE-2023-36874

Mitre link : CVE-2023-36874

JSON object : View

Products Affected

microsoft

CWE

NVD-CWE-noinfo