Use After Free Vulnerability in Windows DWM Core Library by Microsoft
CVE-2026-44804

7.8HIGH

Key Information:

Vendor

Microsoft
Status
Windows 11 Version 26h1
Vendor
CVE Published:
9 June 2026

What is CVE-2026-44804?

The Windows DWM Core Library contains a use after free vulnerability that can be exploited by an authorized attacker to locally elevate privileges. This type of vulnerability arises when memory that is no longer in use is still accessible, which can lead to unauthorized actions. To mitigate risks, users are encouraged to apply available patches and stay informed on security updates from Microsoft.

Affected Version(s)

Windows 11 version 26H1 ARM64-based Systems 10.0.28000.0 < 10.0.28000.2269

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.