Local privilege escalation via undisclosed input validation

Improper input validation in Windows DWM Core Library allows local users with low privileges to elevate privileges on affected Windows systems. Microsoft has not published the invalid input, code path, or validation operation responsible for the flaw. Exploitation requires local access but no user interaction; the reported consequence is privilege elevation on the targeted host, with no remote attack path disclosed.