CVE-2026-20817 | Microsoft Windows up to Server 2025 Error Reporting Service insufficient permissions or privileges

January 13, 2026 Yanac

A vulnerability was found in Microsoft Windows up to Server 2025. It has been classified as critical. This issue affects some unknown processing of the component Error Reporting Service. The manipulation leads to improper handling of insufficient permissions or privileges.

This vulnerability is documented as CVE-2026-20817. The attack needs to be performed locally. There is not any exploit available.

It is recommended to apply a patch to fix this issue.VulDB Recent EntriesRead More