NetSight
high7.8

CVE-2026-27924

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Impact

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Affected products

VendorProductAffected versions
MicrosoftWindows 10 21h2
before 10.0.19044.7184
MicrosoftWindows 10 22h2
before 10.0.19045.7184
MicrosoftWindows 11 23h2
before 10.0.22631.6936
MicrosoftWindows Server 2022
before 10.0.20348.5020
MicrosoftWindows Server 2022 23h2
before 10.0.25398.2274

Weakness classification

References