CNNVD-202510-1899 Information

CNNVD ID

CNNVD-202510-1899

CVE-2025-55694

  • CNNVD Published: 2025-10-14

Description (Chinese)

Microsoft Windows Error Reporting(WER)是美国微软(Microsoft)公司的一个组件。使用户能够将应用程序故障、内核故障、无响应的应用程序和其他应用程序特定问题通知 Microsoft。 Microsoft Windows Error Reporting(WER)存在访问控制错误漏洞,该漏洞源于攻击者利用该漏洞可以提升权限。

Description (English)

Microsoft Windows Error Reporting (WER) is a component of Microsoft USA. Enables users to notify Microsoft of application failure, kernel failure, unresponsive applications and other application-specific issues. Microsoft Windows Error Reporting (WER) had an error in access control, which stemmed from the fact that the attackers could use that loophole to enhance their authority.

Hazard Level

Medium

Vulnerability Type

访问控制错误

Affected Vendor

微软

Published

2025-10-14

Last Modified

2026-02-24

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55694

Patch

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55694

Share on: