Skip to content

CVE-2025-55681

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
December 17, 2025
Last Seen
December 17, 2025
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Microsoft Patches Critical DWM Vulnerabilities in January 202637.7

On January 13, 2026, Microsoft released a patch for a critical zero-day vulnerability in its Desktop Window Manager (DWM), tracked as CVE-2026-20805, which allowed local attackers to expose sensitive user-mode memory. Additionally, a separate out-of-bounds vulnerability, CVE-2025-55681, was identifi...

Microsoft Desktop Window Manager Vulnerability CVE-2025-55681 Allows Privilege Escalation36.4

A vulnerability identified as CVE-2025-55681 exists in the Microsoft Desktop Window Manager, specifically within the dwmcore!CBrushRenderingGraphBuilderAddEffectBrush function. This flaw allows for privilege escalation, potentially affecting users of Windows operating systems.

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Privilege EscalationMicrosoftWindows