Local privilege escalation via DWM heap overflow

Heap-based buffer overflow in the Microsoft Windows DWM Core Library allows local users with low privileges to obtain elevated privileges. Microsoft has not disclosed the affected DWM routine, the attacker-controlled input, or the incorrect memory operation that overruns the heap buffer. Exploitation requires existing low-privilege local access, needs no user interaction, and can compromise confidentiality, integrity, and availability.