---
id: "CVE-2026-105583"
page: "https://infrastack.ai/live/CVE-2026-105583"
kind: "vulnerability"
aliases: ["CVE-2026-105583"]
title: "Windows DWM Core Library: invalid pointer lets a local user gain privileges"
severity: "high"
cvss: 7.0
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "windows"]
not_affected_if: []
published_at: "2026-11-10T19:18:01+00:00"
first_seen_at: "2026-11-10T19:24:21+00:00"
updated_at: "2026-11-10T19:53:57+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105583", "first_seen_at": "2026-11-10T19:24:21+00:00"}]
exploit_sources: []
---

# Windows DWM Core Library: invalid pointer lets a local user gain privileges

Link for people: https://infrastack.ai/live/CVE-2026-105583 (this .md is for agents)

The Windows Desktop Window Manager Core Library releases an invalid pointer or reference. An authorized local attacker can use this to elevate their privileges on the machine.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:24:21+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-105583

## From the sources

Release of invalid pointer or reference in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_