CVE Catalog
CVE-2026-20842
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk0.38%
30th percentile - higher than 30% of all known CVEs
Summary
A use-after-free vulnerability in Windows DWM allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could gain elevated privileges, potentially leading to system takeover.
Recommendation
Install the latest security updates from Microsoft for Windows DWM.
Other vulnerabilities in Windows DWM
Original NVD description (English source)
Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.