61801 matches found
CVE-2026-69714
CVE-2026-69714 is a stack-based buffer overflow in the Windows Device Association Service that allows an authorized attacker to elevate privileges over a network. The vulnerability requires low privileges and user interaction , with a CVSS 3.1 score of 8.0 (HIGH) and impacts of High across Confid...
CVE-2026-69791
CVE-2026-69791 is a use-after-free vulnerability in the Windows Device Association Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 base score of 7.0 (HIGH) , with a local attack vector, high complexity, low privileges require...
EUVD-2026-73577
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69581
CVE-2026-69581 is a use-after-free vulnerability in the Windows Device Association Service that allows an authorized, locally authenticated attacker to elevate privileges . The attack requires low privileges , involves high complexity , and needs no user interaction , with unchanged scope but hig...
EUVD-2026-73541
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69488
A use-after-free vulnerability in the Windows Device Association Service allows an authorized local attacker to escalate privileges . The CVSS 3.1 score is 7.0 (HIGH) , with a local attack vector, high complexity, low required privileges, and no user interaction, yielding high impact on confident...
EUVD-2026-73522
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73517
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69478
CVE-2026-69478 is a heap-based buffer overflow in the Windows Device Association Service that allows an authorized attacker to elevate privileges locally . The vulnerability is rated CVSS 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, resulting in high impact ...
EUVD-2026-73456
Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to disclose information locally...
CVE-2026-69351
Windows Universal Plug and Play (UPnP) Device Host contains an information disclosure vulnerability that allows a locally authenticated attacker with low privileges to expose private personal information without user interaction. The CVSS v3.1 score is 5.5 (Medium) with a high confidentiality imp...
EUVD-2026-73440
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network...
CVE-2026-69314
CVE-2026-69314 is a use-after-free vulnerability in the Windows Device Association Broker service that allows an authorized attacker to elevate privileges over a network . The vulnerability carries a CVSS 3.1 score of 7.1 (HIGH) , with an attack vector of Network, High complexity, Low privileges ...
EUVD-2026-73268
Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-77500
A release of invalid pointer or reference vulnerability in the Windows Device Association Service allows an authorized attacker to escalate privileges locally. The flaw is rated CVSS 7.8 (High) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning an attacker with low local privileges and...
CVE-2026-69443
CVE-2026-69443 is an out-of-bounds read in Windows Device Health Attestation (DHA) that allows an unauthorized attacker to disclose information over a network . The vulnerability is rated CVSS 7.5 (High) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, meaning it is exploitable over the netw...
CVE-2026-69711
CVE-2026-69711 is a use after free vulnerability in the Windows Device Association Service that allows an authorized local attacker with low privileges to achieve privilege escalation . The attack requires high complexity and no user interaction, with high impact on confidentiality, integrity, an...
EUVD-2026-73042
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69693
A use-after-free flaw in the Windows Device Association Broker service allows an authorized local attacker to achieve privilege escalation . The vulnerability is rated HIGH (CVSS 3.1: 7.0) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , indicating that exploitation requires high attack com...