CVE-2026-20871

Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-20842

Use after free in Windows DWM allows an authorized attacker to elevate privileges locally...

CVE-2026-20805

Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally...

CVE-2026-20805

Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally...

CVE-2026-20871

Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-20871

CVE-2026-20871 refers to a Desktop Window Manager (dwm.exe) use-after-free vulnerability that enables local privilege escalation to SYSTEM. The connected exploit report and advisories describe a DWM-related attack path (Visual‑Field Singularity) affecting the DWM compositor, with PoC/claims of in...

CVE-2026-20871 Desktop Window Manager Elevation of Privilege Vulnerability

...

CVE-2026-20871 Desktop Window Manager Elevation of Privilege Vulnerability

...

CVE-2026-20842

Use after free in Windows DWM allows an authorized attacker to elevate privileges locally...

CVE-2026-20842 Microsoft DWM Core Library Elevation of Privilege Vulnerability

...

CVE-2026-20805

Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally...

CVE-2026-20805

CVE-2026-20805 is a local information-disclosure vulnerability in Microsoft Windows Desktop Window Manager (dwm.exe). The provided documents describe that an authenticated, low-privilege user can leak sensitive information via improper handling of ALPC-related structures (ALPC ports/sections) and...

CVE-2026-20805 Desktop Window Manager Information Disclosure Vulnerability

...

CVE-2026-20805 Desktop Window Manager Information Disclosure Vulnerability

...

Desktop Window Manager Elevation of Privilege Vulnerability

Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally...

January 13, 2026—KB5073457 (OS Build 20348.4648)

None None...

Desktop Window Manager Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally...

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Use after free in Windows DWM allows an authorized attacker to elevate privileges locally...

PT-2026-2775

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions 21.0 and 19.5.5 and earlier Description InDesign Desktop versions 21.0, 19.5.5, and earlier are susceptible to an Out-of-bounds Read issue, potentially leading to memory exposure. An attacker could exploit this to...

PT-2026-2767

Name of the Vulnerable Software and Affected Versions Dreamweaver Desktop versions 21.6 and earlier Description Dreamweaver Desktop versions 21.6 and earlier are susceptible to an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' issue. Successful exploitati...