Heap-based Buffer Overflow in Windows DWM Core Library Affects Microsoft
CVE-2025-64679
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 9 December 2025
What is CVE-2025-64679?
A heap-based buffer overflow vulnerability exists in the Windows Desktop Window Manager (DWM) Core Library. This issue allows an authenticated attacker to elevate their privileges locally, potentially gaining unauthorized access to sensitive system resources and executing arbitrary code. The vulnerability arises from improper handling of objects in memory, which can be exploited if certain conditions are met. Users and administrators are advised to apply relevant security updates immediately to mitigate any potential risks.
Affected Version(s)
Windows 10 Version 1507 32-bit Systems 10.0.10240.0 < 10.0.10240.21161
Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.8519
Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.7919