Weak authentication in Windows Error Reporting allows an authorized local attacker to elevate privileges, resulting in a local privilege escalation. The flaw is categorized as CWE‑1390, a weak authentication weakness, which can be exploited by users who already have local account access but do not have system-level rights.

The vulnerability affects Microsoft Windows 10 versions 1607, 1809, 21H2, and 22H2 as well as Windows 11 versions 23H2, 24H2, 25H2, 26H2, and 26H1. It also impacts Windows Server 2016, 2019, 2022, and 2025, including both standard and server core installations, across various processor architectures such as x86, x64, and ARM64.

The CVSS score of 7.8 indicates a medium‑to‑high severity risk, and the EPSS score is not available, so current exploitation probability is unknown. The flaw is not listed in the CISA KEV catalog. The likely attack vector is a local, authorized attacker who can authenticate to the system but not yet possess elevated privileges; by abusing the weak authentication mechanism in the Windows Error Reporting service, such an attacker can gain higher privileges without exploiting additional vulnerabilities.