Privilege escalation via Desktop Window Manager heap overflow

Heap-based buffer overflow in Desktop Window Manager in Microsoft Windows allows local users to gain elevated privileges. Microsoft and NVD publicly describe the issue only as a DWM heap overflow and NVD adds CWE-122 and CWE-125 mappings, but no reviewed vendor bulletin or patch material names the vulnerable routine or discloses the exact bounds-check failure. Code execution as a local low-privilege user on a vulnerable workstation or server is the apparent gate, and the published impact is local privilege escalation rather than remote code execution.