Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Microsoft DWM Core Library: Unapproved Access to Elevated Privileges

published 5 years ago · actively exploited
Summary

The Microsoft Desktop Window Manager's core library has a security weakness that could allow an attacker to gain more access than they should have. This could lead to unauthorized changes to your system or data. Update your system to the latest version to fix this issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
microsoft windows All versions
Original advisory text
Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability
Microsoft Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation.
Fix within
Internet-facing Within 14 days at most
Internal Within 14 days at most
Exploitation
Known exploited
Listed in the CISA KEV catalogue - exploitation confirmed in the wild.
Timeline
Published3 Nov 2021
Updated29 May 2026
First seen29 May 2026
Track software like this
Free during beta