CVE-2026-70255 | Microsoft Windows up to Server 2025 Desktop Window Manager heap-based overflow

October 14, 2026 Yanac

A vulnerability classified as very critical has been found in Microsoft Windows up to Server 2025. Affected by this vulnerability is an unknown functionality of the component Desktop Window Manager. Performing a manipulation results in heap-based buffer overflow.

This vulnerability is known as CVE-2026-70255. Attacking locally is a requirement. No exploit is available.

It is recommended to apply a patch to fix this issue.VulDB Recent EntriesRead More