A use‑after‑free flaw in the Windows Desktop Window Manager (DWM) Core Library allows an attacker who already has authorized local access to gain elevated privileges. The vulnerability arises when the library incorrectly handles memory that has been freed, enabling the attacker to control program flow or execute arbitrary code with higher privileges. Because the flaw is local and requires an authorized user, the potential impact is a compromise of the entire host rather than a remote service or data breach.

Microsoft Windows 11 version 26H1 (x64) is affected. No other vendors or versions are listed.

The CVSS score of 7.8 indicates a high severity for a local privilege escalation. Exploitation requires a legitimate user account and a crafted input to the DWM core, so the attack vector is likely a local authenticated user. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. At present, no public exploit appears to be distributed, but the high severity means that the flaw could be proactively weaponised by an attacker with local access, enabling further compromise of the system.