CVE-2026-44811General(microsoft / windows_11_26h1)

LOWCVSS 7.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch microsoft windows_11_26h1 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-20CWE-122CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • windows_11_26h1

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • General: 1 classified signal
  • 2 total mentions across 1 day

Affected systems

Vendors
Products
windows_11_26h1

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-06-10: 2Patch / Workaround · 2026-06-10: 106-10
Signal classification2 categories
General
150.0%
Patch
150.0%
Referenced assets6 URLs
Full discourse2 posts
  • Thanatos Tian@HototogisuTian
    Patch

    6 vulnerabilities I reported were addressed in Microsoft's June Patch Tuesday. This is my first DWM vulnerability found through vulnerability hunting. Hoping to find more in Windows graphics components. CVE-2026-44811: https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-44811

    Post summary

    The post announces that CVE‑2026‑44811, a DWM vulnerability, was fixed in Microsoft’s June Patch Tuesday and provides a link to the official advisory; no PoC, exploit, or active attack information is disclosed.

    1001075
    25 followersView on X
  • Thanatos Tian@HototogisuTian
    General

    CVE-2026-40409: https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-40409 CVE-2026-42968: https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-42968 CVE-2026-42974: https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-42974 CVE-2026-42981: https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-42981 CVE-2026-44811: https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-44811 CVE-2026-45638: https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-45638

    Post summary

    The passage lists several Microsoft CVEs with links to MSRC advisories but offers no additional details on PoCs, exploits, active use, patches, or technical specifications.

    0000071
    25 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
OSmicrosoftwindows_11_26h1--arm64
OSmicrosoftwindows_11_26h1--x64

Explore more