Exploitation Summary
EIP tracks 3 public exploits for CVE-2026-20817. PoCs published by oxfemale, dwgth4i, XZ1r0.
AI-analyzed exploit summary The repository contains a functional proof-of-concept exploit for CVE-2026-20817, a local privilege escalation vulnerability in Windows Error Reporting (WER) service. The exploit leverages improper handling of ALPC messages to execute arbitrary commands as SYSTEM via crafted messages with shared memory.
Description
Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
Exploits (3)
The repository contains a functional proof-of-concept exploit for CVE-2026-20817, a local privilege escalation vulnerability in Windows Error Reporting (WER) service. The exploit leverages improper handling of ALPC messages to execute arbitrary commands as SYSTEM via crafted messages with shared memory.
This repository contains a functional exploit PoC for CVE-2026-20817, targeting a local privilege escalation (LPE) vulnerability in the Windows Error Reporting Service (WerSvc) via ALPC port manipulation. The exploit crafts a malicious ALPC message to inject a controlled command-line argument into a SYSTEM-level WerFault.exe process.
This repository contains a functional proof-of-concept exploit for CVE-2026-20817, a local privilege escalation vulnerability in Windows Error Reporting (WER) service. The exploit leverages improper handling of ALPC messages to execute arbitrary commands as SYSTEM via crafted messages with shared memory.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H