CVE-2026-65788: Desktop Window Manager Elevation of Privilege Vulnerability
Desktop Window Manager Elevation of Privilege Vulnerability
Other sources
Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26200.9168Fixed in 10.0.26100.9106Patch KB5120994 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22631.7517Patch KB5120240 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.28000.2704Patch KB5121000 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.33296Fixed in 10.0.26100.33222Patch KB5120228 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.9168Fixed in 10.0.26000.9106Patch KB5120994 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.9168Fixed in 10.0.26100.9106Patch KB5120994
Event History
Frequently Asked Questions
What is the severity of CVE-2026-65788?
CVE-2026-65788 has a severity rating of high with a score of 7.
How do I fix CVE-2026-65788?
To address CVE-2026-65788, apply the latest security updates provided by Microsoft for affected versions.
What software is affected by CVE-2026-65788?
CVE-2026-65788 affects Microsoft Windows 11, Microsoft Windows Server 2025, and the Microsoft Desktop Window Manager.
What type of vulnerability is CVE-2026-65788?
CVE-2026-65788 is a Use After Free vulnerability that allows an attacker to elevate privileges locally.
Who can exploit CVE-2026-65788?
CVE-2026-65788 can be exploited by an authorized attacker with some local access to the system.