CVE-2025-30400: high-severity vulnerability in Microsoft Windows 10 Version 1809
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
A flaw in Windows Desktop Window Manager allows someone already logged into a computer to gain higher-level access by exploiting memory that was already freed. This matters because it lets a regular user become an administrator.
Use-after-free vulnerability in Microsoft DWM Core Library enables privilege escalation via exploitation of freed memory regions. Attack requires prior local authentication; successful exploitation grants elevated privileges, typically SYSTEM-level access, allowing complete system compromise.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.