So, here, users need to install them as soon as possible to defend against these types of vulnerabilities. Microsoft has already released security updates and patches to fix the flaw for several versions of Windows 10.

Implement an enterprise-grade security solution that identifies advanced network-layer threats early on.

Guard all of your devices with a robust endpoint security solution and patch management capabilities.Immediately install the patches released on April 13 by Microsoft on all the vulnerable systems to prevent threat actors from exploiting them.The security researchers at Kaspersky has recommended quick mitigations, and here they are mentioned below:. So, in this case, the cybersecurity analysts of Kaspersky believe that the hacking groups that are specialized in targeted attacks were already actively abusing this bug along with other known weaknesses to hack into other user’s systems without being detected by security tools. The “CVE-2021-28310” is a privilege escalation bug, and abusing this flaw an attacker can easily evade the operating system’s user levelling systems and become an administrator to perform abstruser actions on the affected PC.

Zero-day vulnerability in Desktop Window Manager (DWM) In short, the DWM (Desktop Window Manager) clutches all the necessary information from the buffer of each program and formulates the composite view of the overall interface that the user perceives. So, this process is a vital part of Windows that you can’t prevent from running. This allows Windows to add effects like transparency and live taskbar thumbnails.

The Desktop Window Manager composes the application windows screen before drawing it on your screen.

Desktop Window Manager (DWM) is an essential component of Windows responsible for rendering the windows that use the operating system.

Window manager dwm