CVE-2023-36874

Deeper analysis

CVE-2023-36874 is an elevation-of-privilege vulnerability in the Windows Error Reporting Service. The flaw, assigned CWE-59, permits a local attacker to perform unauthorized file operations that lead to privilege escalation on affected Windows systems. It carries a CVSS 3.1 base score of 7.8 reflecting local attack vector, low complexity, and low privileges required.

An authenticated local user without additional user interaction can exploit the service to obtain full administrative control over the host, resulting in complete confidentiality, integrity, and availability impact. Public exploit code targeting the issue has been published, confirming the attack path is practical on unpatched systems.

Microsoft’s security update guide addresses the vulnerability and supplies patches that resolve the underlying path-handling weakness. CISA has added CVE-2023-36874 to its Known Exploited Vulnerabilities catalog, indicating confirmed in-the-wild use and requiring federal agencies to apply mitigations within prescribed timelines.

The EPSS score has reached a peak of 0.7156 with a current value of 0.7022, reflecting sustained exploitation interest after disclosure.