Microsoft Windows DWM Core Library Out-of-Bounds Read Vulnerability Allowing Information Disclosure

A vulnerability allowing out-of-bounds read has been identified in the Windows DWM Core Library. This issue enables an authorized attacker to locally disclose information by reading portions of heap memory.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure by allowing an attacker to read sensitive data from memory.

Remediation

Users can download the security update for this vulnerability via the Microsoft Update Catalog. The update is included in the June 2026 Patch Tuesday release.