114 matches found
CVE-2025-30400
CVE-2025-30400 Concept: Windows DWM Use-After-Free UAF Project Overview This repository features the CVE-2025-30400 Concept , a Python program designed to illustrate the impact of a Use-After-Free UAF privilege escalation zero-day vulnerability , such as the one reported in Microsoft Windows...
Inside-CVE-2026-20805-How-a-Windows-DWM-Flaw-Exposed-Sensitive-Data
Inside-CVE-2026-20805-How-a-Windows-DWM-Flaw-Exposed-Sensitive-Data CVE‑2026‑20805: A Windows Desktop Window Manager flaw causing local information disclosure. Requires low privileges, no user interaction. Rated CVSS 5.5 Medium. Actively exploited and listed in CISA KEV; patch released January...
CVE-2026-69775
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network...
CVE-2026-69775
CVE-2026-69775 is a use-after-free vulnerability in the Windows DWM Core Library that allows an authorized attacker to elevate privileges over a network. The CVSS 3.1 score is 7.1 (HIGH) , with a vector of AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating that exploitation requires network access, ...
CVE-2026-68797
creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:00+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:21+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:00:56+00:00| seen|...
CVE-2026-61932
Access of resource using incompatible type 'type confusion' in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-61933
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally...
EUVD-2026-56687
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2026-62894
CVE-2026-62894 describes a heap-based buffer overflow in the Windows DWM Core Library that allows an authenticated local attacker to elevate privileges. The vulnerability is documented across CVE/NVD listings with a CVSSv3.1 base score of 7.8 (HIGH), vector: LOCAL, LOW attack complexity, and NONE...
CVE-2026-62703
CVE-2026-62703: Out-of-bounds read in Windows DWM Core Library. An authenticated, local attacker can disclose information. Affected component: Windows DWM Core Library. Impact aligns with CVSS: Confidentiality High; Privileges Required Low; User Interaction None; Attack Vector Local. The provided...
CVE-2026-62703 Windows DWM Core Library Information Disclosure Vulnerability
...
CVE-2026-61933 Windows DWM Core Library Information Disclosure Vulnerability
...
CVE-2026-61933 Windows DWM Core Library Information Disclosure Vulnerability
...
CVE-2026-61932 Windows DWM Core Library Elevation of Privilege Vulnerability
...
CVE-2026-61932 Windows DWM Core Library Elevation of Privilege Vulnerability
...
EUVD-2026-56337
Access of resource using incompatible type 'type confusion' in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
Windows DWM Core Library Elevation of Privilege Vulnerability
Access of resource using incompatible type 'type confusion' in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
Windows DWM Core Library Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
PT-2026-70451
Name of the Vulnerable Software and Affected Versions Windows DWM Core Library affected versions not specified Description An out-of-bounds read in the Windows DWM Core Library allows an authorized attacker to disclose sensitive information locally, which may affect the system. Recommendations At...
PT-2026-70468
Name of the Vulnerable Software and Affected Versions Windows DWM Core Library affected versions not specified Description An out-of-bounds read in the Windows DWM Core Library allows an authorized attacker to disclose sensitive information locally, which can affect the system. An out-of-bounds...