---
id: "CVE-2026-94525"
page: "https://infrastack.ai/live/CVE-2026-94525"
kind: "vulnerability"
aliases: ["CVE-2026-94525"]
title: "Windows Error Reporting: local privilege escalation by running a crafted application"
severity: "high"
cvss: 7.0
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["endpoints", "infrastructure", "local", "privilege-escalation", "windows"]
not_affected_if: ["non-windows"]
published_at: "2026-11-10T19:21:38+00:00"
first_seen_at: "2026-11-10T19:25:21+00:00"
updated_at: "2026-11-10T20:35:55+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94525", "first_seen_at": "2026-11-10T19:25:21+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-11-10T20:35:55+00:00"}]
exploit_sources: []
---

# Windows Error Reporting: local privilege escalation by running a crafted application

Link for people: https://infrastack.ai/live/CVE-2026-94525 (this .md is for agents)

Windows Error Reporting mishandles how it handles and executes files, which lets an attacker who can run a specially crafted application gain higher privileges on the machine. An attacker who succeeds gets greater access to sensitive information and system functions.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Windows build against Microsoft's security update guide for CVE-2026-94525 (unknown: the sources do not give affected build numbers)
- Confirm Windows Update has installed the latest cumulative update (unknown: the sources do not name it)

## Timeline

- 2026-11-10T19:25:21+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-94525
- 2026-11-10T20:35:55+00:00 analyst — MSRC update guide page is JS-only (web-cli returns empty; browser-cli quota exhausted); CVRF index only says November 2026 Security Updates (released 2026-11-10). No affected builds or KB read from a primary source, so nothing verified. Revisit when MSRC page is readable.

## From the sources

An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it.
An attacker who successfully exploited the vulnerability could gain greater access to sensitive information and system functionality. To exploit the vulnerability, an attacker could run a specially crafted application.
The security update addresses the vulnerability by correcting the way that WER handles and executes files.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_