CVE-2026-32152

CVE-2026-32152 is a use-after-free vulnerability in Desktop Window Manager that permits authorized local attackers to elevate their privileges on affected systems. This vulnerability affects Windows desktop environments and exploits memory management weaknesses in the graphical subsystem. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with a local attack vector requiring low complexity and low privileges, resulting in high impact across confidentiality, integrity, and availability. No user interaction is required for exploitation, making it a straightforward privilege escalation path for authenticated users. Currently, there is no evidence of active exploitation in the wild. The vulnerability does not appear on the CISA Known Exploited Vulnerabilities list and remains inactive on threat intelligence hot lists. With an EPSS score of 0.00049 and a FAUCET risk score of 39.0 out of 100, the immediate exploitation probability remains relatively low, though organizations should prioritize patching given the privilege escalation capability and the low barrier to exploitation for local users.