A high-severity use after free vulnerability in the Microsoft Windows Desktop Window Manager allows a locally authenticated attacker to achieve full privilege escalation.

This vulnerability is a use after free flaw (CWE-416) within the Desktop Window Manager, which can be triggered by an attacker who already possesses low-level local authentication on the target host.

Successful exploitation grants an attacker elevated privileges, effectively compromising the integrity and confidentiality of the host machine. Given the CVSS score of 7.8, this vulnerability presents a high risk to organizational security, as it allows attackers to bypass security boundaries and perform unauthorized actions that would typically be restricted to administrative accounts.

Immediate Action: Apply the latest security updates provided by Microsoft to the affected Windows versions to resolve the memory management flaw.

Proactive Monitoring: Review system logs for signs of suspicious process execution or attempts to modify system-level configurations by standard user accounts.

Compensating Controls: Ensure that the principle of least privilege is strictly enforced, limiting the number of users with local access to critical systems.

Public Exploit Available: No (exploit_available: false)

The risk posed by local privilege escalation is significant, particularly in environments where multiple users share system access. Administrators should prioritize the deployment of the official security patches to the identified Windows versions to eliminate this vulnerability, as it provides a direct path for an existing low-level user to gain total control over the affected system.