[CVE-2026-97798] Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error …

Descripción técnica

Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Puntuación CVSS

Score: 7.8/10 — Severidad: HIGH — Estado NIST: Undergoing Analysis

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Debilidades (CWE)

CWE-88

Fuente oficial

Publicado en NIST NVD.