Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Dismissed
(no matching packages found)
Permalink CVE-2026-61932
7.8 HIGH
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): High (H)
  • Integrity (I): High (H)
  • Availability (A): High (H)
  • Exploit Code Maturity (E): Unproven (U)
  • Remediation Level (RL): Official Fix (O)
  • Report Confidence (RC): Confirmed (C)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): High (H)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): High (H)
  • Modified Availability (MA): High (H)
created 3 weeks, 6 days ago Activity log
  • Created & dismissed (no matching packages found) suggestion 3 weeks, 6 days ago
Windows DWM Core Library Elevation of Privilege Vulnerability

Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

Affected products

Windows Server 2016
  • <10.0.14393.9418
Windows Server 2019
  • <10.0.17763.9115
Windows Server 2022
  • <10.0.20348.5499
Windows 10 Version 1607
  • <10.0.14393.9418
Windows 10 Version 1809
  • <10.0.17763.9115
Windows 10 Version 21H2
  • <10.0.19044.7663
Windows 10 Version 22H2
  • <10.0.19045.7663
Windows 11 Version 23H2
  • <10.0.22631.7517
Windows 11 version 23H2
  • <10.0.22631.7517
Windows Server 2016 (Server Core installation)
  • <10.0.14393.9418
Windows Server 2019 (Server Core installation)
  • <10.0.17763.9115