CVE-2026-44811

HIGH WAF: Medium
CVSS 7.8 Published: 2026-06-09
CWE-20

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

WAF Coverage Analysis

Improper Input Validation Medium WAF Coverage

OWASP: A03:2021 Injection

920xxx - Protocol Enforcement 941xxx - XSS / XXE 942xxx - SQL Injection

Affected Software

VendorProductVersion
microsoftwindows_11_26h1up to 10.0.28000.2269
microsoftwindows_11_26h1up to 10.0.28000.2269

References

Back to CVE Database