61801 matches found
CVE-2026-69711
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69693
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally...
CVE-2026-69581
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69574
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69488
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69478
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69351
Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to disclose information locally...
CVE-2026-69314
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network...
CVE-2026-69296
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network...
CVE-2026-68830
Improper link resolution before file access 'link following' in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to disclose information locally...
CVE-2026-28582
In onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to and modification of device credentials due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed...
CVE-2026-28582
In onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to and modification of device credentials due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed...
EUVD-2026-73946
In onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to and modification of device credentials due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed...
CVE-2026-28582
A missing permission check in the onCreate method of ConfirmDeviceCredentialActivity.java allows for unauthorized access to and modification of device credentials. This vulnerability can result in local information disclosure without requiring additional execution privileges or user interaction. ...
CVE-2026-83940
CVE-2026-83940 is a use after free vulnerability in the Windows Device Association Service that allows an authorized local attacker to elevate privileges . The CVSS 3.1 base score is 7.0 (HIGH) with a high attack complexity , low privileges required , and high impact across confidentiality, integ...
EUVD-2026-73884
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73654
Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
CVE-2026-69866
CVE-2026-69866 is a use-after-free vulnerability in Windows Device Association Service that allows an authorized local attacker to escalate privileges. The CVSS v3.1 score is 7.0 (HIGH) , with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , meaning exploitation requires local access , low privi...