Description
Windows Error Reporting (WER) in Microsoft Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows an attacker to gain greater access to sensitive information and system functionality, due to the way that WER handles and executes files, aka "Windows Elevation of Privilege Vulnerability".
Metrics
CVSS 3.0 7.0/10
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HAffected software
| Vendor | Product | Versions |
|---|---|---|
| Microsoft Corporation | Windows Error Reporting (WER) | Microsoft Windows 10 Gold, 1511, and 1607, and Windows Server 2016 |
References
- http://www.securityfocus.com/bid/100785Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039353Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8702Patch, Vendor Advisory
- http://www.securityfocus.com/bid/100785Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039353Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8702Patch, Vendor Advisory
Timeline
- Published
- Sep 13, 2017
- Last modified
- Jun 17, 2026
- NVD status
- Modified