Windows Desktop Window Manager: heap overflow lets a local user gain higher privileges

Affects Windows machines where a user can sign in locally, so the risk is to shared or multi-user systems and to any attacker who already has a foothold on a machine. The sources do not list affected Windows builds or the patched update, so the exposed range is unknown. Single-user machines with only trusted accounts are lower priority but still need the vendor update once it is available.