High (7.8) in microsoft. EPSS 4.8% chance of exploitation in the next 30 days.
An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles objects in memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.
Severity
CVSS 3.1
7.8 high
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
4.8% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)