CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-02-10
Microsoft Windows Desktop Window Manager (DWM) Local Privilege Escalation Vulnerability (CVE-2026-21519) Technical Advisory
[Affected Scope] Desktop Window Manager (DWM) component within Microsoft Windows operating systems
[Impact] An authorized local attacker can exploit a type confusion vulnerability to elevate privileges to SYSTEM, enabling full system compromise
[Mitigation] Apply the latest Microsoft cumulative security updates immediately and monitor endpoint process creation events for anomalous DWM behavior