VDB
GCVE-110-NCSC-2026-53
GCVE-110-NCSC-2026-53
Advisory PublishedCVSS 7.8/10
A type confusion vulnerability in the Desktop Window Manager allows authorized attackers to locally elevate their privileges, leading to potential local privilege escalation.
Weaknesses (CWE)
CWE-843Access of Resource Using Incompatible Type ('Type Confusion')CWE-122Heap-based Buffer OverflowCWE-416Use After FreeCWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')CWE-269Improper Privilege ManagementCWE-693Protection Mechanism FailureCWE-476NULL Pointer DereferenceCWE-287Improper AuthenticationCWE-73External Control of File Name or PathCWE-367Time-of-check Time-of-use (TOCTOU) Race ConditionCWE-284Improper Access ControlCWE-532Insertion of Sensitive Information into Log FileCWE-126Buffer Over-readCWE-822Untrusted Pointer DereferenceCWE-59Improper Link Resolution Before File Access ('Link Following')CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')
Risk Scores
CVSS 3.1
7.8/10
High · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Microsoft | vers:unknown/* | — | — |
Aliases
CVE-2023-2804CVE-2026-20841CVE-2026-20846CVE-2026-21222CVE-2026-21231CVE-2026-21232CVE-2026-21234CVE-2026-21235CVE-2026-21236CVE-2026-21237CVE-2026-21238CVE-2026-21239CVE-2026-21240CVE-2026-21241CVE-2026-21242CVE-2026-21243CVE-2026-21244CVE-2026-21245CVE-2026-21246CVE-2026-21247CVE-2026-21248CVE-2026-21249CVE-2026-21250CVE-2026-21251CVE-2026-21253CVE-2026-21255CVE-2026-21508CVE-2026-21510CVE-2026-21513CVE-2026-21517CVE-2026-21519CVE-2026-21525CVE-2026-21533
References
Browse GCVE Records
73,685 records in the GCVE database · Updated July 18, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.