515 matches found
CVE-2025-30400
CVE-2025-30400 概念実証: Windows DWM Use-After-Free UAF プロジェクト概要 このリポジトリは CVE-2025-30400 概念実証 を提供する Python プログラムであり、Microsoft Windows Desktop Window Manager DWM Core Library CVE-2025-30400 で報告されたような Use-After-Free UAF 権限昇格ゼロデイ脆弱性 の影響を示すためのものです。この重大な脆弱性は 2025 年 5 月に実際に悪用され、攻撃者が SYSTEM 権限昇格を達成できるものでした。...
windows-kernel-exploits
windows-kernel-exploits 简介 windows-kernel-exploits 漏洞列表 Security Bulletin KB Description Operating System CVE-2021-33739 Microsoft DWM Core Library Elevation of Privilege Vulnerability Windows 10, 20 CVE-2021-1732 Windows Win32k Elevation of Privilege Vulnerability Windows 10, 2019/20H2...
CVE-2024-30051
Windows DWM Core Library 特権昇格の脆弱性 CVE-2024-30051 2024年8月15日公開 このブログ記事では、Core Impact のエクスプロイトが開発された際に私が分析した、Microsoft Windows DWM Core ライブラリの脆弱性について説明します。権限のない攻撃者が、Integrity System 特権を持つ DWM ユーザーとしてコードを実行できるようにするものです CVE-2024-30051。 エクスプロイトを開発する当時は十分な公開情報がなかったため、多くのリバースエンジニアリングを行う必要がありました。ここでは、IDA...
Inside-CVE-2026-20805-How-a-Windows-DWM-Flaw-Exposed-Sensitive-Data
Inside-CVE-2026-20805-How-a-Windows-DWM-Flaw-Exposed-Sensitive-Data CVE‑2026‑20805: Windows Desktop Window Manager の欠陥により、ローカルでの情報漏えいが発生します。低い権限が必要で、ユーザー操作は不要です。CVSS 5.5（中）と評価されています。積極的に悪用されており、CISA KEV に掲載されています。2026年1月にパッチがリリースされました。 Inside CVE 2026 20805: How a Windows DWM Flaw Exposed Sensiti...
CVE-2026-69775
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network...
EUVD-2026-73062
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network...
CVE-2026-69775
CVE-2026-69775 is a use-after-free vulnerability in the Windows DWM Core Library that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires network access, ...
Windows DWM Core Library Elevation of Privilege Vulnerability
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network...
CVE-2026-69775: Use After Free
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network...
PT-2026-87711
Name of the Vulnerable Software and Affected Versions Windows DWM Core Library affected versions not specified Description A use-after-free condition in the Windows DWM Core Library allows an authorized attacker to elevate privileges over a network. Use-after-free is a memory corruption issue tha...
The vulnerability of the DWM Core Library in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the DWM Core Library in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the DWM Core Library in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the DWM Core Library in Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2026-68797
creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:00+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:21+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:00:56+00:00| seen|...
CVE-2026-62894
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-62703
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally...
CVE-2026-61932
Access of resource using incompatible type 'type confusion' in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-61933
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally...
EUVD-2026-56687
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
