Microsoft Windows DWM Core Library Privilege Escalation Vulnerability

A use-after-free vulnerability has been identified in the Windows DWM Core Library, allowing an authorized attacker to locally elevate privileges. This vulnerability affects multiple versions of Windows 10 and Windows Server 2022 and 2019.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update KB5078885 for Windows 10 and KB5078766 or KB5078737 for Windows Server 2022. For Windows Server 2019, the security update KB5078752 is available. Instructions for downloading these security updates can be found on the Microsoft Update Catalog.