Windows DWM Core Library Elevation of Privilege Vulnerability

A security flaw in Windows Desktop Window Manager (DWM) Core Library allows a local attacker with low privileges to gain higher system permissions. An attacker can exploit this to run malicious code with elevated privileges on the affected system.

CWE-122 (heap-based buffer overflow) in Windows DWM Core Library enables local privilege escalation when a low-privileged user processes specially crafted input. The vulnerability requires local access and leads to arbitrary code execution with SYSTEM or elevated privileges.