Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 13 products
| Date | Total | Labels |
|---|
| 2026-06-10 | 1 | General1 |
| 2026-09-23 | 1 | Disclosure1 |
#windowsupdate #microsoft ●悪用可能性 －悪用の事実を確認済み：0 件 －悪用される可能性が高い：14 件 ・CVE-2026-42905 7.8 Windows DWM Core ライブラリ ・CVE-2026-42980 7.8 Windows NT OS カーネル つづく… https://x.com/kawn2020/status/2064629746538008881
Post summary
The tweet lists CVEs with high exploitation potential but provides no PoC, exploit tool, active exploitation evidence, or patch details, merely offering a high-level vulnerability overview.
🚨 New Article: RCA of CVE-2026-42905 — UAF in Windows DWM Reversing DWM architecture traces the root cause of CVE-2026-42905 to a use-after-free that lets you call a function from an address sitting in a freed chunk inside privileged usermode dwm.exe, a path that can still be turned into SYSTEM with tricks like the Project Zero write-up on CVE-2023-36033. 🔗 Link: https://xss.mx/threads/149192/ #CVE202642905 #DWM #Windows #UAF #LPE #ReverseEngineering #RedTeam #InfoSec #CyberSecurity
Post summary
The tweet announces a reverse‑engineering article that details a use‑after‑free vulnerability in Windows DWM (CVE‑2026‑42905) capable of local privilege escalation, providing technical specifics but no PoC, exploit code, patch, or evidence of active exploitation.
24 of 24 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | microsoft | windows_10_1607 | - | - | x64 |
| OS | microsoft | windows_10_1607 | - | - | x86 |
| OS | microsoft | windows_10_1809 | - | - | x64 |
| OS | microsoft | windows_10_1809 | - | - | x86 |
| OS | microsoft | windows_10_21h2 | - | - | arm64 |
| OS | microsoft | windows_10_21h2 | - | - | x64 |
| OS | microsoft | windows_10_21h2 | - | - | x86 |
| OS | microsoft | windows_10_22h2 | - | - | arm64 |
| OS | microsoft | windows_10_22h2 | - | - | x64 |
| OS | microsoft | windows_10_22h2 | - | - | x86 |
| OS | microsoft | windows_11_23h2 | - | - | arm64 |
| OS | microsoft | windows_11_23h2 | - | - | x64 |
| OS | microsoft | windows_11_24h2 | - | - | arm64 |
| OS | microsoft | windows_11_24h2 | - | - | x64 |
| OS | microsoft | windows_11_25h2 | - | - | arm64 |
| OS | microsoft | windows_11_25h2 | - | - | x64 |
| OS | microsoft | windows_11_26h1 | - | - | arm64 |
| OS | microsoft | windows_11_26h1 | - | - | x64 |
| OS | microsoft | windows_server_2012 | - | - | - |
| OS | microsoft | windows_server_2012 | r2 | - | - |
| OS | microsoft | windows_server_2016 | - | - | - |
| OS | microsoft | windows_server_2019 | - | - | - |
| OS | microsoft | windows_server_2022 | - | - | - |
| OS | microsoft | windows_server_2025 | - | - | x64 |