CVE-2023-36033: Windows DWM Core Library Elevation of Privilege Vulnerability
Microsoft Windows Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation.
Other sources
Windows DWM Core Library Elevation of Privilege Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22631.2715Patch KB5032190 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.25398.531Patch KB5032202 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19045.3693Patch KB5032189 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19043.3693Patch KB5032189 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22621.2715Patch KB5032190 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.2113Fixed in 10.0.20348.2091Patch KB5032304 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.5122Patch KB5032196 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22000.2600Patch KB5032192
Event History
Frequently Asked Questions
What is CVE-2023-36033?
CVE-2023-36033 is a vulnerability in the Windows Desktop Window Manager (DWM) Core Library that allows for privilege escalation.
Which versions of Windows are affected by CVE-2023-36033?
Windows 10 versions 1809, 21H2, 22H2, and Windows 11 versions 21H2, 22H2, and 23H2 are affected.
What is the severity of CVE-2023-36033?
CVE-2023-36033 has a severity of 7.8 (high).
How can I fix CVE-2023-36033?
You can fix CVE-2023-36033 by applying the appropriate security patches provided by Microsoft for your specific Windows version.
Where can I find more information about CVE-2023-36033?
You can find more information about CVE-2023-36033 on the Microsoft Security Response Center website.