PULSE
FEED
ransomaurora reclama a Adams Warehouse & Delivery, Inc. · US · Transportationransomthegentlemen reclama a Suhai Segurana Pessoal · BR · Professional Servicesransomthegentlemen reclama a SBI Audiovisual Medinbox · ES · Healthcareransomthegentlemen reclama a Saga University · JP · Educationransomthegentlemen reclama a Netcore Unbxd · IN · Technologyransomthegentlemen reclama a REGiO Nord · DE · Otherransomthegentlemen reclama a Museum Siam · TH · Hospitalityransomthegentlemen reclama a Skin Center · US · Healthcareransomthegentlemen reclama a Thai Ha PCL KASET · TH · Agriculture and Food Productionransomthegentlemen reclama a Inovar Packaging Group · AU · Manufacturingransomthegentlemen reclama a Engineers Ireland · IE · Professional Servicesransomthegentlemen reclama a North Bridge Venture Partners · US · Financial Servicesransomthegentlemen reclama a SONGWOOI · KR · Not Foundransomthegentlemen reclama a Petroleum Telcom Communications · PK · Energy & Utilitiesransomaurora reclama a Adams Warehouse & Delivery, Inc. · US · Transportationransomthegentlemen reclama a Suhai Segurana Pessoal · BR · Professional Servicesransomthegentlemen reclama a SBI Audiovisual Medinbox · ES · Healthcareransomthegentlemen reclama a Saga University · JP · Educationransomthegentlemen reclama a Netcore Unbxd · IN · Technologyransomthegentlemen reclama a REGiO Nord · DE · Otherransomthegentlemen reclama a Museum Siam · TH · Hospitalityransomthegentlemen reclama a Skin Center · US · Healthcareransomthegentlemen reclama a Thai Ha PCL KASET · TH · Agriculture and Food Productionransomthegentlemen reclama a Inovar Packaging Group · AU · Manufacturingransomthegentlemen reclama a Engineers Ireland · IE · Professional Servicesransomthegentlemen reclama a North Bridge Venture Partners · US · Financial Servicesransomthegentlemen reclama a SONGWOOI · KR · Not Foundransomthegentlemen reclama a Petroleum Telcom Communications · PK · Energy & Utilities
← All CVEs
CVE Watch—

CVE-2023-36874

Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability

CVSS

—

No CVSS

EPSS

42.6%

p99

KEV

YES

Jul 11, 2023

Exploit Today

80

0-100

Published: — · Last modified: —

EPSS · 30d
42.6%EPSS · 30 days43.4%
2026-09-172026-10-15
KEV catalog record

Product

Microsoft / Windows

Vulnerability

Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability

Added to KEV

Jul 11, 2023

Remediate by

Aug 1, 2023

Known ransomware use

No

Summary description

Microsoft Windows Error Reporting Service contains an unspecified vulnerability that allows for privilege escalation.

Required action

Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

Notes

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-36874; https://nvd.nist.gov/vuln/detail/CVE-2023-36874

Related CVEs
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-969518.8 HIG
74.0%
KEV—72Microsoft Windows Command Injection Vulnerability10h
CVE-2026-858807.8 HIG
89.3%
KEV—77Microsoft Windows Heap-Based Buffer Overflow Vulnerability22d
CVE-2026-819637.8 HIG
31.9%
KEV—60Microsoft Windows Link Following Vulnerability37d
CVE-2026-322024.3 MED
92.0%
KEV—78Microsoft Windows Protection Mechanism Failure Vulnerability63d
CVE-2026-208055.5 MED
94.4%
KEV—78Microsoft Windows Information Disclosure Vulnerability78d
CVE-2025-622217.8 HIG
84.4%
KEV—75Microsoft Windows Use After Free Vulnerability21d