EXPOSURES › CVE-2021-33739
CVE-2021-33739
HIGH ⌖ ON CISA KEV · EXPLOITEDA privilege escalation flaw in Microsoft's Desktop Window Manager was actively exploited in the wild, allowing attackers to escalate privileges on Windows systems.
This vulnerability in the Desktop Window Manager (DWM) Core Library allows attackers to escalate privileges on Windows systems. Because it is listed in CISA's KEV catalog, it has been actively exploited in the wild, posing a significant risk to unpatched systems. DIB organizations must ensure their Windows environments are fully patched to prevent attackers from gaining elevated access.
Shame score — The vulnerability was actively exploited in the wild and included in CISA's KEV catalog, indicating a high level of avoidability and real-world impact.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation.
"Microsoft Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation."
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |