CVE-2026-83519
9.8CriticalPublished 13 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-122
Impact
Unauthenticated attackers can execute arbitrary code with elevated privileges over the network. They need network access to an exposed Windows Error Reporting interface with no credentials or user interaction required.
Root cause
A heap-based buffer overflow in the Windows Error Reporting service allows remote memory corruption.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Install the Microsoft security update for Windows Error Reporting referenced in the advisory. If patching cannot be done immediately, restrict network access to affected Windows hosts or stop and disable the Windows Error Reporting Service (WerSvc).
$ powershell -Command "Stop-Service -Name WerSvc; Set-Service -Name WerSvc -StartupType Disabled"AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.