Product:
Windows DWM Core Library
Summary
Buffer over-read in Windows DWM Core Library allows an authorized attacker to disclose information locally. This vulnerability can lead to significant information leakage, impacting the confidentiality and integrity of the system. It is classified as having a high severity due to its potential impact on affected systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2026-34336 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the system. By leveraging the buffer over-read, the attacker can gain unauthorized access to sensitive information stored in memory. This requires low privileges and does not necessitate user interaction, making it easier for an attacker to execute.
Affected Products
- Windows DWM Core Library: Vulnerable to buffer over-read, allowing information disclosure.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Regularly updating systems and monitoring for unusual activity can help protect against potential exploitation. Additionally, restricting local access to sensitive systems can reduce the risk of unauthorized information disclosure.