CVE-2023-36033: high-severity vulnerability in Microsoft Windows 10 Version 1809
Windows DWM Core Library Elevation of Privilege Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
A vulnerability in Windows DWM (Desktop Window Manager) Core Library allows an attacker with local access to gain higher privileges on the system. This is dangerous because it could let someone take full control of your computer.
An elevation of privilege vulnerability exists in the Windows DWM Core Library (CWE-822). A local attacker can exploit this to escalate privileges and execute code with system-level permissions. The vulnerability requires local access but provides significant impact through unauthorized system control.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.