CVE-2025-21304

CVE-2025-21304 is an elevation of privilege vulnerability in the Microsoft DWM Core Library, stemming from a use-after-free error (CWE-416). It affects the Desktop Window Manager Core Library component in Microsoft Windows operating systems. The vulnerability has a CVSS v3.1 base score of 7.8 (High), with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating local access is required, low attack complexity, low privileges needed, no user interaction, unchanged scope, and high impacts on confidentiality, integrity, and availability.

A low-privileged local attacker can exploit this vulnerability to elevate privileges on the affected system. By triggering the use-after-free condition in the DWM Core Library, the attacker can achieve arbitrary code execution with SYSTEM-level privileges, potentially leading to full system compromise, data theft, modification of critical files, or disruption of services.

Microsoft's security advisory provides details on mitigation and available patches at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21304. Security practitioners should apply the recommended updates promptly to address this issue.