CVE-2026-50692
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
Risk Assessment
Risk includes privilege escalation, potentially leading to control over the window manager and possibly the entire system.
Recommendation
Apply security updates from Microsoft and restrict access to DWM services.
Other vulnerabilities in Desktop Window Manager
See all- CVE-2026-65788High
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-65787High
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-65786High
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-58634High
A Use-After-Free vulnerability in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-58633High
A Use-After-Free vulnerability in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.