Actively exploited in the wild
Microsoft Windows DWM Core Library Use-After-Free Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2025-05-13. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CVE-2025-30400
HighCVSS 7.8KEVSummary
Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access can elevate privileges, potentially leading to full system compromise.
Recommendation
Install the latest Windows security updates that address this vulnerability.
Other vulnerabilities in Windows DWM
See allOriginal NVD description (English source)
Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.