Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310) used in the wild

Read the original article: Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310) used in the wild


CVE-2021-28310 is an out-of-bounds (OOB) write vulnerability in dwmcore.dll, which is part of Desktop Window Manager (dwm.exe). We believe it is exploited in the wild, potentially by several threat actors.


Read the original article: Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310) used in the wild