Windows Error Reporting Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with administrator privileges.

To exploit the vulnerability, an attacker must first gain unprivileged execution on a victim system.

The security update addresses the vulnerability by correcting the way WER handles files.