CVE-2026-58634: Desktop Window Manager Elevation of Privilege Vulnerability
Published Jul 14, 2026
·Updated
Desktop Window Manager Elevation of Privilege Vulnerability
Other sources
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
— Microsoft
Affected Software
5 affected componentsFixes available
Microsoft Desktop Window Manager
Microsoft Windows 11=26H1
10.0.28000.2525
Microsoft Windows 11=26H1
10.0.28000.2525
Microsoft Windows 11 26h1<10.0.28000.2525
Microsoft Windows 11 26h1<10.0.28000.2525
Remediation
Event History
Jul 14, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
CVE Published
via MITRE·05:10 PM
Data Sourced
via MITRE·05:10 PM
DescriptionSeverity
Data Sourced
via NVD·06:18 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The attacker must already be authorized on the affected system and able to act locally. The provided data does not indicate that remote access or user interaction is required.
2
What should organizations do to remediate the vulnerability?
Apply the available patch. The affected software listed includes Microsoft Windows 11, Windows 11 26h1, and Microsoft Desktop Window Manager.