Microsoft Windows DWM Privilege Escalation Vulnerability

A vulnerability allowing untrusted pointer dereference in the Windows Desktop Window Manager (DWM) has been identified. This flaw enables an authorized attacker to locally elevate privileges. The vulnerability affects multiple Windows 10 versions, Windows 11, Windows Server 2016, Windows Server 2022, and various Windows Server 2016 and 2022 editions.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can download the security update for this vulnerability through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5065427, KB5065430, KB5065425, KB5065431, and KB5065429.