Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

The remote Windows host is missing security update 5078885. It is, therefore, affected by multiple vulnerabilities

  - Use after free in Broadcast DVR allows an authorized attacker to elevate privileges locally.
    (CVE-2026-23667)

  - Use after free in Windows Print Spooler Components allows an authorized attacker to execute code over a     network. (CVE-2026-23669)

  - Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
    (CVE-2026-24285)         
  - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.
    (CVE-2026-25177, CVE-2026-25188)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5078752. It is, therefore, affected by multiple vulnerabilities

  - Use after free in Broadcast DVR allows an authorized attacker to elevate privileges locally.
    (CVE-2026-23667)

  - Use after free in Windows Print Spooler Components allows an authorized attacker to execute code over a     network. (CVE-2026-23669)

  - Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
    (CVE-2026-24285)     
  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands.
    (CVE-2026-26111)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5078766 or hotpatch 5078737. It is, therefore, affected by multiple vulnerabilities

  - Use after free in Windows Print Spooler Components allows an authorized attacker to execute code over a     network. (CVE-2026-23669)

  - Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
    (CVE-2026-24285)

  - External control of file name or path in Windows Kernel allows an authorized attacker to elevate     privileges locally. (CVE-2026-24287)     
  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands.
    (CVE-2026-26111)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
301772	KB5078885: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (March 2026)	Nessus	Windows : Microsoft Bulletins	high
301771	KB5078752: Windows 10 version 1809 / Windows Server 2019 Security Update (March 2026)	Nessus	Windows : Microsoft Bulletins	high
301763	KB5078766: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (March 2026)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2026-25189

high

Tenable Plugins

high

high

high