CVE-2025-30400

Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.

• Published May 13, 2025
• CVSS 7.8 high
• 1.9% chance of exploitation in the next 30 days (EPSS)
• In CISA's Known Exploited Vulnerabilities catalog

CVE-2025-30400 at the National Vulnerability Database