CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CVE-2024-26169

criticalknown exploitedpublic exploitcovered by 1 sourcefirst seen 2024-06-13
Actively exploited. CVE-2024-26169 is listed in the CISA Known Exploited Vulnerabilities catalog (added 2024-06-13) — exploitation has been observed in the wild, and US federal agencies are required to remediate it under BOD 22-01. Treat patching as urgent.
Public exploit code is available. Proof-of-concept or working exploit code for CVE-2024-26169 is indexed in GitHub PoC. Expect opportunistic scanning and exploitation attempts — prioritize remediation.
Microsoft Windows Error Reporting Service contains an improper privilege management vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.

CSIRTS triage

What
The vulnerability allows a local attacker to gain SYSTEM privileges.
Who is affected
Local users with permissions on Microsoft Windows systems.
Urgency
Immediate remediation is necessary due to active exploitation and critical severity.
Action
Install the latest security patches for Windows Error Reporting Service.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CVE-2024-26169

Get an email if CVE-2024-26169 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Exploit availability

Public exploit or proof-of-concept code for CVE-2024-26169 is indexed in these free datasets. Available exploit code raises real-world risk independent of the CVSS score.

Advisory coverage (1)

External references

NVD record for CVE-2024-26169

CVE.org record

CISA KEV catalog

Embed the live status

CVE-2024-26169 live status badge — this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2024-26169 status](https://www.csirts.com/badge/CVE-2024-26169)](https://www.csirts.com/cve/CVE-2024-26169)