NetSight
high7.8

CVE-2026-25189

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Impact

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Affected products

VendorProductAffected versions
MicrosoftWindows 10 1809
before 10.0.17763.8511
MicrosoftWindows 10 21h2
before 10.0.19044.7058
MicrosoftWindows 10 22h2
before 10.0.19045.7058
MicrosoftWindows Server 2019
before 10.0.17763.8511
MicrosoftWindows Server 2022
before 10.0.20348.4830

Weakness classification

References