NetSight
IP …
high8.4Known exploited

CVE-2021-33739

Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2021-11-03. Federal due date: 2021-11-17.

Apply updates per vendor instructions.

Impact

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Affected products

VendorProductAffected versions
MicrosoftWindows 10 1909
before 10.0.18363.1621
MicrosoftWindows 10 2004
before 10.0.19041.1052
MicrosoftWindows 10 20h2
before 10.0.19042.1052
MicrosoftWindows 10 21h1
before 10.0.19043.1052
MicrosoftWindows Server 2004
before 10.0.19041.1052
MicrosoftWindows Server 20h2
before 10.0.19042.1052

References