The Windows DWM Core Library contains an out‑of‑bounds read that can be triggered by an authorized local user. Exploiting the bug allows the attacker to gain higher privileges on the affected machine, enabling the execution of arbitrary code with system rights. The weakness corresponds to CWE‑125, a buffer reading issue that can lead to privilege escalation. No remote exploitation path is described; the vulnerability requires local access.

Microsoft Windows 10 (versions 1607, 1809, 21H2, 22H2); Microsoft Windows 11 (versions 23H2, 24H2, 25H2, 26H2); Microsoft Windows Server 2016, 2019, 2022, and 2025, including Server Core installations.

The CVSS score of 7.0 indicates high severity. EPSS is not available, so the likelihood of exploitation is uncertain, and the vulnerability is not listed in CISA KEV. Likely attack vector is local, with the victim needing authorized access. Because the issue allows privilege escalation, it poses a significant risk if an attacker can execute code locally.