CVE-2026-44811
EUVD-2026-3574709.06.2026, 17:17
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| microsoft | windows_11_26h1 | 𝑥 < 10.0.28000.2269 |
| microsoft | windows_11_26h1 | 𝑥 < 10.0.28000.2269 |
𝑥
= Vulnerable software versions
Windows Releases
Platform | Version | ||
|---|---|---|---|
| Windows 11 |
|
Common Weakness Enumeration
- CWE-20 - Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
- CWE-416 - Use After FreeReferencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.