$ cve CVE-2019-0863 JSON

CVE-2019-0863 KEV EXPLOIT

7.8

HIGH · CVSS 3.1 · EPSS 5.2% (pctl 92)

Patch first

On CISA KEV — known exploited in the wild, due 2022-05-03.

Description

An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.

Scoring

CVSS	7.8 (HIGH, v3.1)
Vector	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS	5.21% — more likely to be exploited than 92% of all CVEs
On CISA KEV	yes — remediate by 2022-05-03
Public exploit	yes
Published	2019-05-16
Last modified	2026-06-17

CISA KEV

Name	Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability
Added	2021-11-03
Due	2022-05-03
Vendor / product	Microsoft / Windows
Ransomware use	none reported

Affected (16)

Vendor	Product
microsoft	windows 10 1507
microsoft	windows 10 1607
microsoft	windows 10 1703
microsoft	windows 10 1709
microsoft	windows 10 1803
microsoft	windows 10 1809
microsoft	windows 10 1903
microsoft	windows 7
microsoft	windows 8.1
microsoft	windows rt 8.1
microsoft	windows server 1803
microsoft	windows server 1903
microsoft	windows server 2008
microsoft	windows server 2012
microsoft	windows server 2016
microsoft	windows server 2019

Public exploits

Source	Title	Date
exploit-db	Microsoft Windows (x86/x64) - 'Error Reporting' Discretionary Access Control List / Local Privilege Escalation	2019-05-22

References

→ the Explorer · watch your stack · NVD