CVE WatchNov 10, 2026

CVE-2026-105575

Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privilege

CVSS

7.8

High

EPSS

—

KEV

—

Exploit Today

0-100

Published: Nov 10, 2026 · Last modified: Nov 10, 2026 · CWE-843

EPSS · 30d

Not enough EPSS history yet.

Technical description

Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Official references

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105575

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-970137.8 HIG

—

——0Access of resource using incompatible type ('type confusion') in Windows Shell allows an authorized attacker to elevate privileges locally.4h CVE-2026-960287.8 HIG

—

——0Access of resource using incompatible type ('type confusion') in Windows Installer allows an authorized attacker to elevate privileges locally.4h CVE-2026-959608.8 HIG

—

——0Access of resource using incompatible type ('type confusion') in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.4h CVE-2026-1199936.5 MED

—

——0Access of resource using incompatible type ('type confusion') in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.4h CVE-2026-1169226.5 MED

—

——0Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.3h CVE-2026-1127537.0 HIG

—

——0Access of resource using incompatible type ('type confusion') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.4h