CVE-2026-70255

A use after free vulnerability in Desktop Window Manager allows an authenticated attacker to elevate privileges locally. The flaw arises from the use of freed memory.

Heap-based buffer overflow vulnerability in the Desktop Window Manager. An authorized attacker can elevate privileges locally.

Out-of-bounds read in the Desktop Window Manager component. An authorized attacker can elevate privileges locally.

Type confusion (access of resource using incompatible type) in Desktop Window Manager. An authorized attacker can exploit this flaw to elevate privileges locally.

Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

A Use-After-Free vulnerability in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

A Use-After-Free vulnerability in Desktop Window Manager allows an authorized attacker to elevate privileges locally.