Desktop Window Manager Zero-Day Enables Privilege Escalation
ID: 075e1fe9-32e4-59b9-9a0f-de359721b0ef
STIX ID: report--075e1fe9-32e4-59b9-9a0f-de359721b0ef
Feed Name: GBHackers
Threat Score
A zero-day Type Confusion vulnerability (CVE-2026-21519) in the Windows Desktop Window Manager is being actively exploited to achieve SYSTEM-level privilege escalation; Microsoft released emergency patches on February 10, 2026 for multiple Windows and Server versions and recommends immediate patching, reboot, and reviewing logs for suspicious dwm.exe activity.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.