Executive brief
A security vulnerability exists in the Windows Desktop Window Manager (DWM) Core Library, which is responsible for rendering the visual effects on the Windows desktop. An attacker who already has basic access to a computer could exploit this flaw to view sensitive information that should be protected. This could lead to the unauthorized disclosure of system memory contents, potentially aiding in further attacks.
Technical details
An out-of-bounds read vulnerability (CWE-125) exists within the Windows DWM Core Library (dwminit.dll or related components). The flaw is triggered when the Desktop Window Manager improperly handles memory buffers, allowing a process to read data outside of the intended memory space. To exploit this, an attacker must have local access to the target system with low-level privileges. Successful exploitation results in the disclosure of sensitive information from the DWM process memory, which could include cryptographic keys or pointers used to bypass memory protections like ASLR. Microsoft has released security updates to address this issue.
Affected products
- Microsoft Windows
Timeline
- 2026-06-09: disclosed
- 2026-06-09: advisory