CVE-2026-73003

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

CVE-2026-69866

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69791

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69714

Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network...

CVE-2026-69711

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69693

Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally...

CVE-2026-69581

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69574

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69488

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69478

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69351

Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to disclose information locally...

CVE-2026-69314

Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network...

CVE-2026-69296

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network...

CVE-2026-68830

Improper link resolution before file access 'link following' in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to disclose information locally...

EUVD-2026-73946

In onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to and modification of device credentials due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed...

CVE-2026-28582

In onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to and modification of device credentials due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed...

CVE-2026-28582

A missing permission check in the onCreate method of ConfirmDeviceCredentialActivity.java allows for unauthorized access to and modification of device credentials. This vulnerability can result in local information disclosure without requiring additional execution privileges or user interaction. ...

CVE-2026-28582

In onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to and modification of device credentials due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed...

EUVD-2026-73884

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83940

CVE-2026-83940 is a use after free vulnerability in the Windows Device Association Service that allows an authorized local attacker to elevate privileges . The CVSS 3.1 base score is 7.0 (HIGH) with a high attack complexity , low privileges required , and high impact across confidentiality, integ...