CVE-2021-33739VulnerabilityPublished 11/03/2021Updated 10/24/2026

CVE-2021-33739: Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

Affects Microsoft WindowsSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 11/03/2021
KEV deadline: 11/17/2021
EPSS: 6.6% chance of exploitation in 30 days – higher than 93% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2021-33739 (opens in a new tab)

Description

CVE-2021-33739 is a privilege escalation vulnerability in the Microsoft Desktop Window Manager (DWM) Core Library. It allows an attacker to gain elevated privileges on affected Windows systems. The vulnerability has been exploited in the wild. No specific affected versions or detailed technical information are provided in the available data.

Summary

Microsoft Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that enables privilege escalation. This vulnerability has been observed to be exploited in the wild, indicating active threat usage. No detailed technical specifics or affected Windows versions are provided in the source data.

Impact

Successful exploitation of this vulnerability allows an attacker to escalate privileges on a Windows system, potentially leading to unauthorized administrative access. This can facilitate further compromise of the system or network.

Mitigation

Patch status is not yet confirmed — check the Microsoft vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users and administrators should monitor official Microsoft security updates and apply any relevant patches promptly once available.

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 09:19:59 UTC

References

Related threats