CVE-2026-20817CWE-280

CVE-2026-20817

High · published January 13, 2026

CVSS v3.1
7.8
EPSS
5%
Percentile
92.7
In the wild
Unconfirmed
What it is

⚡ An authorized user can become the boss of their system! This Windows Error Reporting vulnerability lets attackers elevate their privileges locally with improper permission handling. 🚀 Think of it like a hotel where a guest finds a hidden key that opens all the deluxe suites. They weren’t supposed to have that access, but here they are enjoying the penthouse view! This means that once inside, an attacker could gain complete control over the system, accessing sensitive data, installing malware, or wreaking havoc without a trace. The potential for disaster is absolutely staggering!

Put simply

Think of it like a hotel where a guest finds a hidden key that opens all the deluxe suites. They weren’t supposed to have that access, but here they are enjoying the penthouse view! This vulnerability arises from the failure to properly handle permissions in Windows Error Reporting, allowing an authorized user to elevate their privileges and perform unauthorized actions.

What to do

This means that once inside, an attacker could gain complete control over the system, accessing sensitive data, installing malware, or wreaking havoc without a trace. The potential for disaster is absolutely staggering! To protect yourself, ensure that the system is updated with the latest security patches provided by Microsoft. Additionally, review user permissions thoroughly to limit access only to what is necessary. Regular audits can help identify any users with excessive privileges. You've got this! Follow these steps, and you'll have your defenses fortified in no time. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.05422 · 92.7th percentile
Weakness
CWE-280 · Improper Handling of Insufficient Permissions or Privileges
Published
2026-01-13T23:16Z
Affected products (8)
ProductVersionsFixed in
microsoft/windows_10_21h2< 10.0.19044.680910.0.19044.6809
microsoft/windows_10_22h2< 10.0.19045.680910.0.19045.6809
microsoft/windows_11_23h2< 10.0.22631.649110.0.22631.6491
microsoft/windows_11_24h2< 10.0.26100.762310.0.26100.7623
microsoft/windows_11_25h2< 10.0.26200.762310.0.26200.7623
microsoft/windows_server_2022< 10.0.20348.464810.0.20348.4648
microsoft/windows_server_2022_23h2< 10.0.25398.209210.0.25398.2092
microsoft/windows_server_2025< 10.0.26100.3223010.0.26100.32230
References (3)
EPSS history
Timeline
  • 13 JAN 17:56Z
    Windows Error Reporting Service Elevation of Privilege Vulnerability
    cvelistv5