CVE Catalog

Actively exploited in the wild

Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

Microsoft - Windows · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.

Required action: Apply updates per vendor instructions.

CVE-2021-33739

HighCVSS 8.4KEV
Published: Updated: Translated: NVD NIST

Summary

Microsoft DWM Core Library Elevation of Privilege Vulnerability. Technical details are not provided in the description.

Risk Assessment

A local attacker may elevate their privileges on the system, potentially leading to full control of the device.

Recommendation

Apply Microsoft security updates for the DWM Core Library and keep Windows systems up to date.

Other vulnerabilities in Microsoft DWM Core Library

Original NVD description (English source)

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS