CVE-2026-58634: Microsoft Windows Desktop Window Manager privilege escalation

CVE-2026-58634 · Severity: high · CVSS 7.8 · Published 2026-07-14

A security vulnerability has been identified in the Microsoft Windows Desktop Window Manager, the component responsible for rendering the visual interface of the operating system. An attacker who already has basic access to a computer could exploit this flaw to gain full administrative control over the system. This could allow them to view sensitive data, install malicious software, or disrupt business operations.

Technologies: Microsoft Windows 11. Vendors: Microsoft.

Quick answers

Is CVE-2026-58634 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-58634 being exploited in the wild.
How severe is CVE-2026-58634?
High severity, with a CVSS score of 7.8, published 14 July 2026.
Which products and versions are affected?
Microsoft Windows 11 10.0.28000.0 to 10.0.28000.2525.
Is there a fix for CVE-2026-58634?
A patch was published on 2026-07-14: Security updates made available via Microsoft Update Guide Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-58634 attacked?
It is attacked with local access, in an operating system.
Am I affected by CVE-2026-58634?
Check whether you run Microsoft Windows 11 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A use-after-free (UAF) vulnerability exists in the Microsoft Desktop Window Manager (DWM.exe) due to improper memory management. A locally authenticated attacker with low privileges can exploit this by triggering a condition where the system attempts to use memory that has already been freed, leading to arbitrary code execution in a high-privilege context. The attack vector is local, requiring no user interaction, and results in a total compromise of confidentiality, integrity, and availability. Microsoft has released security updates to address this issue in affected versions of Windows 11.

Affected products

  • Microsoft Windows 11 version 26H1 10.0.28000.0 to 10.0.28000.2525

Timeline

  • 2026-07-14: advisory: Initial advisory published by Microsoft and NVD
  • 2026-07-14: patched: Security updates made available via Microsoft Update Guide

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.