CVE-2025-30400

CVE-2025-30400 概念：Windows DWM 释放后使用 UAF 漏洞 项目概述 本仓库提供CVE-2025-30400 概念，这是一个 Python 程序，旨在演示 释放后使用 UAF 权限提升零日漏洞的影响，例如 Microsoft Windows 桌面窗口管理器 DWM 核心库 CVE-2025-30400 中报告的这个漏洞。这个于 2025 年 5 月被积极利用的关键漏洞，允许攻击者实现 SYSTEM 权限提升。 该程序不包含 CVE-2025-30400 的实际利用代码 。相反，它对 UAF...

Inside-CVE-2026-20805-How-a-Windows-DWM-Flaw-Exposed-Sensitive-Data

Inside-CVE-2026-20805-How-a-Windows-DWM-Flaw-Exposed-Sensitive-Data CVE‑2026‑20805: A Windows Desktop Window Manager flaw causing local information disclosure. Requires low privileges, no user interaction. Rated CVSS 5.5 Medium. Actively exploited and listed in CISA KEV; patch released January...

CVE-2026-68797

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:00+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:21+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:00:56+00:00| seen|...

CVE-2026-61933

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally...

CVE-2026-61932

Access of resource using incompatible type 'type confusion' in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

EUVD-2026-56687

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2026-62894

CVE-2026-62894 describes a heap-based buffer overflow in the Windows DWM Core Library that allows an authenticated local attacker to elevate privileges. The vulnerability is documented across CVE/NVD listings with a CVSSv3.1 base score of 7.8 (HIGH), vector: LOCAL, LOW attack complexity, and NONE...

CVE-2026-62703

CVE-2026-62703: Out-of-bounds read in Windows DWM Core Library. An authenticated, local attacker can disclose information. Affected component: Windows DWM Core Library. Impact aligns with CVSS: Confidentiality High; Privileges Required Low; User Interaction None; Attack Vector Local. The provided...

CVE-2026-62703 Windows DWM Core Library Information Disclosure Vulnerability

...

CVE-2026-61933 Windows DWM Core Library Information Disclosure Vulnerability

...

CVE-2026-61933 Windows DWM Core Library Information Disclosure Vulnerability

...

CVE-2026-61932 Windows DWM Core Library Elevation of Privilege Vulnerability

...

CVE-2026-61932 Windows DWM Core Library Elevation of Privilege Vulnerability

...

EUVD-2026-56337

Access of resource using incompatible type 'type confusion' in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

Windows DWM Core Library Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

Windows DWM Core Library Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

PT-2026-70451

Name of the Vulnerable Software and Affected Versions Windows DWM Core Library affected versions not specified Description An out-of-bounds read in the Windows DWM Core Library allows an authorized attacker to disclose sensitive information locally, which may affect the system. Recommendations At...

PT-2026-70468

Name of the Vulnerable Software and Affected Versions Windows DWM Core Library affected versions not specified Description An out-of-bounds read in the Windows DWM Core Library allows an authorized attacker to disclose sensitive information locally, which can affect the system. An out-of-bounds...

PT-2026-70588

Name of the Vulnerable Software and Affected Versions Windows DWM Core Library affected versions not specified Description A heap-based buffer overflow in the Windows DWM Core Library allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program...

PT-2026-70450

Name of the Vulnerable Software and Affected Versions Windows DWM Core Library affected versions not specified Description A type confusion issue occurs in the Windows DWM Core Library, where a resource is accessed using an incompatible type. This allows an authorized attacker to elevate privileg...