CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Windows Desktop Window Manager (DWM) Local Privilege Escalation Vulnerability (CVE-2026-21519) Technical Advisory
[Affected Scope] Desktop Window Manager (DWM) component within Microsoft Windows operating systems
[Impact] An authorized local attacker can exploit a type confusion vulnerability to elevate privileges to SYSTEM, enabling full system compromise
[Mitigation] Apply the latest Microsoft cumulative security updates immediately and monitor endpoint process creation events for anomalous DWM behavior
Microsoft Desktop Windows Manager (DWM) Information Disclosure Vulnerability (CVE-2026-20805) Security Advisory
[Affected Scope] Systems running Microsoft Windows operating systems utilizing the Desktop Windows Manager (DWM) component
[Impact] An authorized local attacker can disclose sensitive information from kernel or process memory, potentially facilitating subsequent privilege escalation
[Mitigation] Immediately apply the latest Microsoft cumulative security updates and restrict unauthorized local access on unpatched systems
Windows DWM (Desktop Window Manager) Use-After-Free Local Privilege Escalation Vulnerability (CVE-2025-30400) Security Advisory
[Affected Scope] Desktop Window Manager (DWM) component in Microsoft Windows 10, Windows 11, and Windows Server operating systems
[Impact] An authorized local attacker can exploit a Use-After-Free vulnerability to execute arbitrary code with SYSTEM privileges, leading to complete host takeover
[Mitigation] Immediately apply the official Microsoft cumulative security updates and monitor unpatched systems for anomalous DWM crashes
Windows DWM Core Library Elevation of Privilege Vulnerability (CVE-2024-30051) Technical Advisory
[Affected Scope] Windows 10, Windows 11, and Windows Server operating systems utilizing the Desktop Window Manager (DWM) Core Library
[Impact] Local attackers can trigger a heap-based buffer overflow to execute arbitrary code with SYSTEM privileges, leading to full host compromise
[Mitigation] Immediately apply the Microsoft May 2024 Patch Tuesday cumulative security updates and restrict unauthorized local access
Windows DWM Core Library Elevation of Privilege Vulnerability (CVE-2023-36033) Analysis and Mitigation Guide
[Affected Scope] All supported versions of Windows 10, 11, and Windows Server utilizing the Desktop Window Manager (DWM) core library.
[Impact] A local attacker can exploit this vulnerability to execute arbitrary code with SYSTEM privileges, leading to complete system compromise.
[Mitigation] Immediately apply the official Microsoft cumulative security updates released in November 2023 or later.
Microsoft Windows DWM Core Library Elevation of Privilege Vulnerability (CVE-2021-33739) Analysis and Mitigation Guide
[Affected Scope] Microsoft Windows operating systems utilizing the Desktop Window Manager (DWM), including Windows 10 and Windows Server 2016/2019/2022
[Impact] A local attacker can execute a specially crafted application to elevate privileges to SYSTEM, gaining full control over the compromised host
[Mitigation] Immediately apply the official Microsoft Cumulative Updates (LCU) and restrict local execution privileges on unpatched systems