Firetruck

CVE-2023-36033

KEV

Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

View CVE record →
Vendor / Project
Microsoft
Product
Windows
Date added
Nov 14, 2023
Due date
Dec 5, 2023
Known ransomware use
Unknown
CWEs
CWE-822

Description

Microsoft Windows Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes