Microsoft Windows DWM Zero-Day Poised for Mass Exploit

Microsoft's May Patch Tuesday fixes 59 CVEs across Windows, Office, .NET, Edge and other products, including three zero-days: CVE-2024-30051 (Windows DWM elevation of privilege) and CVE-2024-30040 (MSHTML bypass) are under active exploitation, and CVE-2024-30046 (ASP.NET Core DoS) is publicly known. Kaspersky and other researchers report multiple actors — notably QakBot operators — integrating exploits, and the bulletin highlights additional high-risk issues (SharePoint XXE allowing info disclosure and NTLM relay, kernel and Windows Search Service elevation flaws) that could be chained to achieve full system takeover, making timely patching critical.