EXPOSURES › CVE-2024-26169
CVE-2024-26169
CRITICAL ⌖ ON CISA KEV · EXPLOITEDA local privilege escalation flaw in Windows Error Reporting Service lets attackers gain SYSTEM access, and it's actively exploited in the wild.
This improper privilege management vulnerability allows a local attacker with user-level permissions to escalate to SYSTEM privileges, enabling full system control. DIB organizations must patch this immediately as it is actively exploited in the wild and linked to ransomware campaigns, representing a severe compliance and operational risk.
Shame score — A known privilege escalation flaw actively exploited in the wild for ransomware, showing severe negligence in patching and threat monitoring.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft Windows Error Reporting Service contains an improper privilege management vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |