Windows DWM Core Library Elevation of Privilege Vulnerability

Summary

The Windows Desktop Window Manager (DWM) Core Library, a component of Microsoft Windows, contains a flaw that could allow an attacker with local access to gain higher privileges on the affected system. Successful exploitation would let the attacker perform actions normally restricted to administrators or the system itself.

Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.

Timeline

1. Nov 14, 2023Added to CISA KEV

   CISA has evidence of exploitation in the wild

2. Nov 14, 2023, 5:57 PM UTCCVE published
3. Dec 5, 2023CISA remediation deadline

   Due date for US federal agencies to patch

4. Oct 21, 2025, 11:05 PM UTCRecord last updated
5. Oct 22, 2026EPSS reached 10%

   FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

• Microsoft Windows 10 Version 1809

  From 10.0.17763.0 · fixed in 10.0.17763.5122

• Microsoft Windows 10 Version 1809

  From 10.0.0 · fixed in 10.0.17763.5122

• Microsoft Windows Server 2019

  From 10.0.17763.0 · fixed in 10.0.17763.5122

• Microsoft Windows Server 2019 (Server Core installation)

  From 10.0.17763.0 · fixed in 10.0.17763.5122

• Microsoft Windows Server 2022

  From 10.0.20348.0 · fixed in 10.0.20348.2113

• Microsoft Windows 11 version 21H2

  From 10.0.0 · fixed in 10.0.22000.2600

• Microsoft Windows 10 Version 21H2

  From 10.0.19043.0 · fixed in 10.0.19043.3693

• Microsoft Windows 11 version 22H2

  From 10.0.22621.0 · fixed in 10.0.22621.2715

• Microsoft Windows 10 Version 22H2

  From 10.0.19045.0 · fixed in 10.0.19045.3693

• Microsoft Windows 11 version 22H3

  From 10.0.22631.0 · fixed in 10.0.22631.2715

• Microsoft Windows 11 Version 23H2

  From 10.0.22631.0 · fixed in 10.0.22631.2715

• Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)

  From 10.0.25398.0 · fixed in 10.0.25398.531

References 1