Microsoft Desktop Window Manager Zero-Day Exploited in Active Attacks

Microsoft has disclosed a critical information disclosure vulnerability in the Desktop Window Manager that threat actors are actively exploiting. The vulnerability, tracked as CVE-2026-20805, was publicly released on January 13, 2026, and allows authenticated local attackers to access sensitive information without user interaction. The vulnerability exists in Microsoft’s Desktop Window Manager, a core system service […]

The post Microsoft Desktop Window Manager Zero-Day Exploited in Active Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.