Microsoft Windows Desktop Window Manager Privilege Escalation Vulnerability

A use-after-free vulnerability in the Desktop Window Manager (DWM) has been identified, allowing an authorized attacker to locally elevate privileges. This vulnerability affects multiple versions of Windows 10, Windows 11, and Windows Server. The issue arises from improper memory management, which can be exploited to gain higher privileges, potentially leading to SYSTEM access.

Impact

Exploitation of this vulnerability could allow an attacker to gain SYSTEM privileges.

Remediation

Users can download the security update for this vulnerability via the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5082200 for various Windows 10 versions, KB5083768 for Windows 11 version 26H1, KB5082142 for Windows Server 2022, and KB5082198 for Windows Server 2016.