CVE WatchAug 11, 2026

CVE-2026-61932

Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privilege

CVSS

7.8

High

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Aug 11, 2026 · Last modified: Aug 11, 2026 · CWE-122 · CWE-843

EPSS · 30d

Not enough EPSS history yet.

Technical description

Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Official references

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61932

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-713318.1 HIG

—

———Integer overflow or wraparound in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network.6h CVE-2026-703477.8 HIG

—

———Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.6h CVE-2026-703457.8 HIG

—

———Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.6h CVE-2026-703306.7 MED

—

———Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.6h CVE-2026-703046.7 MED

—

———Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.6h CVE-2026-701308.4 HIG

—

———Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.6h