Netskope Threat Labs

OS-WINDOWS Microsoft Windows DWM Core Library elevation of privilege attempt

IPS-CFWIPS-SWG

7 SIDs: 60821, 64221, 64540, 64863, 65399, 66573, 66763

Detects an attempt to exploit CVE-2024-43629, CVE-2025-21414, CVE-2025-30400, and 3 others, a privilege escalation flaw that can grant higher access in Microsoft Windows DWM Core Library.