CNNVD-202510-1892 Information

CNNVD ID

CNNVD-202510-1892

CVE-2025-55692

  • CNNVD Published: 2025-10-14

Description (Chinese)

Microsoft Windows Error Reporting(WER)是美国微软(Microsoft)公司的一个组件。使用户能够将应用程序故障、内核故障、无响应的应用程序和其他应用程序特定问题通知 Microsoft。 Microsoft Windows Error Reporting(WER)存在输入验证错误漏洞,该漏洞源于攻击者利用该漏洞可以提升权限。

Description (English)

Microsoft Windows Error Reporting (WER) is a component of Microsoft USA. Enables users to notify Microsoft of application failure, kernel failure, unresponsive applications and other application-specific issues. Microsoft Windows Error Reporting (WER) has an input-validation error gap, which stems from the fact that the assailants use it to enhance their authority.

Hazard Level

Medium

Vulnerability Type

输入验证错误

Affected Vendor

微软

Published

2025-10-14

Last Modified

2026-02-24

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55692

Patch

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55692

Share on: