Local privilege escalation via unsafe file execution

Privilege escalation in Microsoft Windows Error Reporting allows local users to gain broader system access by running a crafted application. WER improperly handles and executes files supplied through that application; Microsoft has not disclosed the specific file-processing locus or validation failure. Exploitation requires existing low-privilege local access and can expose sensitive information and privileged system functionality.