OS-WINDOWS Microsoft Windows Desktop Windows Manager elevation of privilege attempt

IPS-CFWIPS-SWG

2 SIDs: 65674, 65911

Description

Detects an attempt to exploit CVE-2026-20871 and CVE-2026-21519, a privilege escalation flaw that can grant higher access in Microsoft Windows Desktop Windows Manager.

CVEs

CVE-2026-20871 CVE-2026-21519

Related malware families

Microsoft

References

msrc.microsoft.com
msrc.microsoft.com