Overview
- Description
- Windows DWM Core Library Elevation of Privilege Vulnerability
- Source
- secure@microsoft.com
- NVD status
- Analyzed
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 7.8
- Impact score
- 5.9
- Exploitability score
- 1.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
Known exploits
Data from CISA
- Vulnerability name
- Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability
- Exploit added on
- Nov 14, 2023
- Exploit action due
- Dec 5, 2023
- Required action
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*",
"vulnerable": true,
"matchCriteriaId": "4F018A9A-D2BC-4EB0-BC64-B92DC4EF68DF",
"versionEndExcluding": "10.0.17763.5122"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "455A430D-8451-4B60-8496-E0A0CE27EDE3",
"versionEndExcluding": "10.0.17763.5122"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
"vulnerable": true,
"matchCriteriaId": "395069C3-88A4-493F-9437-23BFC54EA6EE",
"versionEndExcluding": "10.0.17763.5122"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
"vulnerable": true,
"matchCriteriaId": "0968B391-593B-41A0-92BF-5ADA3A420AEA",
"versionEndExcluding": "10.0.19041.3693"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "058883C8-393C-4B21-860B-A49BAB8E56B6",
"versionEndExcluding": "10.0.19041.3693"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
"vulnerable": true,
"matchCriteriaId": "BC4D8D03-F568-47C0-8DDF-C5004AC81402",
"versionEndExcluding": "10.0.19041.3693"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
"vulnerable": true,
"matchCriteriaId": "F71725C1-4E22-4FD8-9A38-39522AB2F8CF",
"versionEndExcluding": "10.0.19045.3693"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "F72FEE7B-4D80-41C7-A23F-065BE8B58013",
"versionEndExcluding": "10.0.19045.3693"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
"vulnerable": true,
"matchCriteriaId": "6FABED21-4A49-4D73-AA4D-37A785CC400C",
"versionEndExcluding": "10.0.19045.3693"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*",
"vulnerable": true,
"matchCriteriaId": "890C6D87-B036-4F68-9BED-0B7783C522BC",
"versionEndExcluding": "10.0.22000.2600"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "B4201E00-C986-4591-8ADA-46BD71980C1C",
"versionEndExcluding": "10.0.22000.2600"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*",
"vulnerable": true,
"matchCriteriaId": "973233D7-396D-4C4F-A276-5D857496CC2D",
"versionEndExcluding": "10.0.22621.2715"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "A3EDFF9F-3C99-47BC-BAB6-A0E68495C469",
"versionEndExcluding": "10.0.22621.2715"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
"vulnerable": true,
"matchCriteriaId": "33C8F7A9-A4A9-4DEF-9AA9-B5CF830DF15B",
"versionEndExcluding": "10.0.22621.2715"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "CEAD5D1A-6484-438F-8852-DC583D4AA5D0",
"versionEndExcluding": "10.0.22621.2715"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB79EE26-FC32-417D-A49C-A1A63165A968"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "821614DD-37DD-44E2-A8A4-FE8D23A33C3C"
}
],
"operator": "OR"
}
]
}
]