CVE-2026-58541

HighCVSS 7.8

Published: 14/07/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

21th percentile - higher than 21% of all known CVEs

Summary

A type confusion vulnerability in Windows DWM allows an authorized attacker to elevate privileges locally.

Risk Assessment

This vulnerability allows an attacker with limited privileges to gain higher privileges on the system, potentially leading to full machine compromise.

Recommendation

Apply the security update from Microsoft that addresses this vulnerability.

Other vulnerabilities in Windows DWM

CVE-2026-20842High
A use-after-free vulnerability in Windows DWM allows an authorized attacker to elevate privileges locally.

Original NVD description (English source)

Access of resource using incompatible type ('type confusion') in Windows DWM allows an authorized attacker to elevate privileges locally.