CVE-2023-36874
For demonstration purposes only. Exploit works on vulnerable Windows clients/servers.
Compile code and create c:\test\system32 directories. Place your wermgr.exe in that directory and run compiled PoC.
wer_poc.mp4
Testing on windows 10 19045.2006
poc.mp4
Resources:
https://www.crowdstrike.com/blog/falcon-complete-zero-day-exploit-cve-2023-36874/
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36874