Windows Error Reporting (WER) Improper Privilege Management Vulnerability

Foxit Studio Photo Out-of-bounds Read Vulnerability


Windows Error Reporting (WER) suffers from improper privilege management vulnerability


The information has been provided by Gal De Leon

The original article can be found at:


An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it.

Vulnerable Systems:

Windows Error Reporting (WER) 

CVE Information:


Disclosure Timeline:
Published Date:10/10/2019