Loading story…
Microsoft disclosed multiple Windows Error Reporting Service elevation-of-privilege vulnerabilities, including CVE-2023-36721, CVE-2025-55692, and CVE-2025-55694, in its Security Update Guide. The advisories identify the same Windows component as affected, indicating repeated security issues in the service that could allow an attacker to gain higher privileges on a targeted system.
The vulnerabilities were published through Microsoft’s official advisory channels and tracked under separate CVE identifiers, showing that the Windows Error Reporting Service has remained a recurring source of privilege-escalation risk across multiple disclosure cycles. Organizations using Windows systems should prioritize Microsoft security updates for affected platforms and review exposure anywhere local privilege escalation could be chained with other access or execution paths.
Get the actors, campaigns, and ATT&CK mapping behind it.
2 events from the most recent confirmed update back to the earliest known activity.
Microsoft published Security Update Guide entries for CVE-2025-55692 and CVE-2025-55694, both described as Windows Error Reporting Service Elevation of Privilege vulnerabilities.
Microsoft added CVE-2023-36721, a Windows Error Reporting Service Elevation of Privilege vulnerability, to its Security Update Guide.
Get the adversaries, campaigns, and ATT&CK mapping behind this technique, with detections ready to deploy.
3 references tracked. Mallory keeps watching after this page renders.
msrc.microsoft.com
Open sourcemsrc.microsoft.com
Open sourcemsrc.microsoft.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft published security advisories for two **Elevation of Privilege** flaws affecting Windows components: `CVE-2026-23660` in **Windows Admin Center in Azure Portal** and `CVE-2025-62472` in **Windows Remote Access Connection Manager**. Both entries were released through Microsoft's Security Update Guide, identifying separate privilege-escalation issues in enterprise-relevant Windows management and connectivity functionality. The disclosures indicate that attackers who successfully exploit the vulnerabilities could gain higher privileges on affected systems, increasing the risk of broader compromise after initial access. Organizations using Windows administrative tooling in Azure environments and systems relying on Remote Access Connection Manager should review Microsoft's advisories, determine exposure to the affected components, and prioritize applicable security updates and mitigation steps.
Jul 12, 2026
Microsoft disclosed two Windows elevation of privilege vulnerabilities affecting core operating system components: **CVE-2025-47985** in **Windows Event Tracing** and **CVE-2025-21358** in **Windows Core Messaging**. Both issues were published through Microsoft's Security Update Guide and classified as local privilege escalation flaws, indicating that successful exploitation could allow an attacker with existing access to a system to gain higher privileges. The vulnerabilities affect separate Windows subsystems but share the same security impact: they could be used to move from limited user access to more powerful execution on a compromised host. Microsoft released advisories for both flaws through its official update channels, underscoring the need for defenders to prioritize Windows patching and review systems where privilege escalation could enable broader compromise, persistence, or lateral movement.
Jul 12, 2026
Microsoft published Security Update Guide entries for multiple Windows vulnerabilities, including **`CVE-2022-21895`**, identified as a **Windows User Profile Service Elevation of Privilege Vulnerability**, alongside newer advisories for **`CVE-2024-29057`** and **`CVE-2024-38140`**. The references indicate a set of Microsoft-tracked security issues affecting Windows components and documented through the Microsoft Security Response Center (MSRC). The available details are limited in the referenced advisories, but the common thread is Microsoft's disclosure and tracking of vulnerabilities that could enable **elevation of privilege** or otherwise require security updates through the Windows patching process. Organizations relying on Windows systems should review the corresponding MSRC entries, determine affected products and versions, and prioritize remediation based on exposure and the role of the impacted systems.
Jul 12, 2026