CVE-2023-36874
ENISA EUVD: EUVD-2023-40794 ↗
Exploited in the Wild
✓ Confirmed 0-Day
★ Google Project Zero
Triaged: March 3, 2026
5 articles
Published: 2023-07-11
EPSS Score
Source: FIRST.org · 2026-05-23
68.83%
probability
This CVE has a 68.83% probability
of being exploited in the next 30 days.
0%
Top 98.6th percentile of all CVEs
100%
CVSS v3.1
Source: VulnerabilityLookup (CIRCL)7.8
HIGH
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Temporal
Exploit Code Maturity
Unproven
Remediation Level
Official Fix
Report Confidence
Confirmed
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Description
NVDWindows Error Reporting Service Elevation of Privilege Vulnerability
Affected Products
Microsoft
Windows 10 Version 1809
10.0.17763.0
Microsoft
Windows 10 Version 1809
10.0.0
Microsoft
Windows Server 2019
10.0.17763.0
Microsoft
Windows Server 2019 (Server Core installation)
10.0.17763.0
Microsoft
Windows Server 2022
10.0.20348.0
Attack Intelligence
Google Project Zero
Discovered
June 30, 2023
Patched
July 11, 2023
Reported by
Vlad Stolyarov and Maddie Stone of Google's Threat Analysis Group (TAG)
Root Cause Analysis
???
Exploits & PoC
241
2023-08-23
Octoberfest7/CVE-2023-36874_BOF
Weaponized CobaltStrike BOF for CVE-2023-36874 Windows Error Reporting LPE
205
2023-08-25
d0rb/CVE-2023-36874
This repository contains a proof-of-concept exploit written in C++ that demonstrates the exploitation of a vulnerability affecting the Windows Error R
78
2024-03-13
crisprss/CVE-2023-36874
CVE-2023-36874 Proof of Concept
2
2023-08-22
4 repos — triés par ⭐
Rechercher sur GitHub ↗
Signal Intelligence
Confidence
78%
EPSS
68.83%
CVSS v3.1
7.8
Mentions
5
Last Seen
Feb 25, 2025
CNA Information
CNA Assigner
microsoft
CNA Title
Windows Error Reporting Service Elevation of Privilege Vulnerability
Analyst Note
This CVE is confirmed as a legitimate Windows elevation of privilege vulnerability affecting Windows 10 Version 1809, with a HIGH CVSS score of 7.8 and documented in official Microsoft patch guidance. The vulnerability was tracked by Google Project Zero, demonstrating independent verification of the issue's validity and severity.
Triage Info
Decided atMar 03, 2026
Published DateJul 11, 2023