Actively exploited in the wild
Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2023-11-14. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2023-36033
HighCVSS 7.8KEVSummary
An elevation of privilege vulnerability in the Windows DWM Core Library. It may allow an attacker to gain higher privileges on the system.
Risk Assessment
Could allow a local attacker to take control of the system by elevating privileges.
Recommendation
Apply Windows security updates provided by Microsoft.
Other vulnerabilities in Windows DWM Core Library
See all- CVE-2026-42896High
Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
- CVE-2024-30051HighActively exploited
A vulnerability in the Windows DWM Core Library allows elevation of privilege. Technical details are not disclosed in the description.
- CVE-2026-69775High
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network.
- CVE-2026-62894High
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
- CVE-2026-62888High
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
- CVE-2026-62703Medium
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
- CVE-2026-61933Medium
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
- CVE-2026-61932High
Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
- CVE-2026-50437Medium
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
- CVE-2026-48566Medium
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Windows DWM Core Library Elevation of Privilege Vulnerability