Summary
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
What privileges could an attacker gain with successful exploitation?
An attacker who successfully exploited this vulnerability could gain unauthorized access to system resources, potentially allowing them to perform actions with the same privileges as the compromised process.
This could lead to further system compromise and unauthorized actions within the network.
Security updates
10.0.17763.7678 — https://support.microsoft.com/help/5063877
10.0.20348.4052 — https://support.microsoft.com/help/5063880
10.0.20348.3989 — https://support.microsoft.com/help/5063812
10.0.19044.6216 — https://support.microsoft.com/help/5063709
10.0.22621.5768 — https://support.microsoft.com/help/5063875
10.0.10240.21100 — https://support.microsoft.com/help/5063889
10.0.14393.8330 — https://support.microsoft.com/help/5063871
6.1.7601.27872 — https://support.microsoft.com/help/5063947
6.1.7601.27872 — https://support.microsoft.com/help/5063927
6.2.9200.25622 — https://support.microsoft.com/help/5063906
6.3.9600.22725 — https://support.microsoft.com/help/5063950
Vulnerabilities 1
-
High 7.8
Desktop Window Manager Elevation of Privilege Vulnerability
Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally.
Revision history
-
#1
Information published.
References
-
CVE-2025-50153 Desktop Window Manager Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50153
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss