CVE-2026-62888: Windows DWM Core Library Elevation of Privilege Vulnerability
Published Aug 11, 2026
·Updated
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
Other sources
Windows DWM Core Library Elevation of Privilege Vulnerability
— Microsoft
Affected Software
34 affected componentsFixes available
Microsoft Windows 11=23H2
10.0.22631.7517
Microsoft Windows 11=26H1
10.0.28000.2704
Microsoft Windows 11=26H1
10.0.28000.2704
Microsoft Windows Server 2025<10.0.26100.33296, <10.0.26100.33222
10.0.26100.3329610.0.26100.33222
Microsoft Windows 11=23H2
10.0.22631.7517
Microsoft Windows 10=22H2
10.0.19045.7663
Microsoft Windows Server 2022<10.0.20348.5499, <10.0.20348.5440
10.0.20348.549910.0.20348.5440
Microsoft Windows Server 2025<10.0.26100.33296, <10.0.26100.33222
10.0.26100.3329610.0.26100.33222
Microsoft Windows 10=21H2
10.0.19044.7663
Microsoft Windows 10=22H2
10.0.19045.7663
Microsoft Windows 10=21H2
10.0.19044.7663
Microsoft Windows Server 2022<10.0.20348.5499, <10.0.20348.5440
10.0.20348.549910.0.20348.5440
Microsoft Windows 10=22H2
10.0.19045.7663
Microsoft Windows 10=21H2
10.0.19044.7663
Microsoft Windows 11=24H2
10.0.26100.916810.0.26100.9106
Microsoft Windows 11=24H2
10.0.26100.916810.0.26200.9106
Microsoft Windows 11=25H2
10.0.26200.916810.0.26200.9106
Microsoft Windows 11=25H2
10.0.26200.916810.0.26200.9106
Microsoft Windows 10 21h2<10.0.19044.7663
Microsoft Windows 10 21h2<10.0.19044.7663
Microsoft Windows 10 21h2<10.0.19044.7663
Microsoft Windows 10 22h2<10.0.19045.7663
Microsoft Windows 10 22h2<10.0.19045.7663
Microsoft Windows 10 22h2<10.0.19045.7663
Microsoft Windows 11 23h2<10.0.22631.7517
Microsoft Windows 11 23h2<10.0.22631.7517
Microsoft Windows 11 24h2<10.0.26100.9106
Microsoft Windows 11 24h2<10.0.26100.9106
Microsoft Windows 11 25h2<10.0.26200.9106
Microsoft Windows 11 25h2<10.0.26200.9106
Microsoft Windows 11 26h1<10.0.28000.2704
Microsoft Windows 11 26h1<10.0.28000.2704
Microsoft Windows Server 2022<10.0.20348.5440
Microsoft Windows Server 2025<10.0.26100.33222
Remediation
Event History
Aug 11, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·02:00 PM
Affected Software
Updated
via Microsoft·02:00 PM
Description
CVE Published
via MITRE·05:06 PM
Data Sourced
via MITRE·05:06 PM
DescriptionSeverity
Data Sourced
via NVD·05:18 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-62888?
CVE-2026-62888 has a severity rating of high with a score of 7.8.
2
How do I fix CVE-2026-62888?
To fix CVE-2026-62888, ensure your Windows operating system is updated with the latest security patches from Microsoft.
3
What type of vulnerability is CVE-2026-62888?
CVE-2026-62888 is classified as a use after free vulnerability in the Windows DWM Core Library.
4
Who is affected by CVE-2026-62888?
CVE-2026-62888 affects users of Microsoft Windows 10, Windows 11, Windows Server 2022, and Windows Server 2025.
5
Can CVE-2026-62888 be exploited remotely?
CVE-2026-62888 requires local access for exploitation, meaning an attacker must have local access to the system.