CVE-2026-97798 | Microsoft Windows up to Server 2025 Error Reporting argument injection

October 14, 2026 Yanac

A vulnerability, which was classified as very critical, was found in Microsoft Windows up to Server 2025. This issue affects some unknown processing of the component Error Reporting. Executing a manipulation can lead to argument injection.

The identification of this vulnerability is CVE-2026-97798. The attack can only be executed locally. There is no exploit available.

It is advisable to implement a patch to correct this issue.VulDB Recent EntriesRead More