Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-27924

No fix known EPSS <1%CVSS 7.8

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Published 2026-04-14 · CVE record · OSV

Products: Microsoft Windows 10 Version 21H2, Microsoft Windows 10 Version 22H2, Microsoft Windows 11 Version 23H2, Microsoft Windows Server 2022, Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)