⚡ Exploit-DB.ai HIGH
HIGH

CVE-2023-36874

Published: March 18, 2026 · Source: National Vulnerability Database (NVD)

⚡ AI Threat Assessment

Windows Error Reporting zero-day EoP exploited by RomCom group in targeted attacks. Chained with CVE-2023-36884 Office RCE for full compromise chains. Apply July 2023 patches and monitor WER service for privilege abuse.

📋 Official Description

Windows Error Reporting Service Elevation of Privilege Vulnerability; zero-day exploited by Storm-0978/RomCom group in targeted attacks against defense organizations.

Get Real-Time CVE Alerts

Supernova subscribers receive AI-triaged CVE alerts the moment they're published — before the PoC drops.

Start Supernova — $99/mo →