CVE-2026-69470

Windows Connected User Experiences and Telemetry contains a use-after-free flaw that allows an authorized attacker to escalate privileges locally . The vulnerability is rated CVSS 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack with high complexity, low ...

CVE-2026-69267

CVE-2026-69267 is an information disclosure vulnerability in Windows Connected User Experiences and Telemetry , caused by insufficient granularity of access control . An authorized local attacker can leverage this flaw to disclose information, with a CVSS 3.1 score of 6.5 (MEDIUM) and a scope cha...

EUVD-2026-73212

Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally...

CVE-2026-68847

A use-after-free vulnerability in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally . The weakness is scored CVSS 3.1 7.0 (HIGH) with a local attack vector, high complexity, and low privileges required. CISA's SSVC assessment indicates no...

EUVD-2026-73191

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability

Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally...

Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

PT-2026-87284

Name of the Vulnerable Software and Affected Versions Windows Connected User Experiences and Telemetry affected versions not specified Description A use after free issue exists in Windows Connected User Experiences and Telemetry. This allows an authorized attacker to elevate privileges locally on...

CVE-2026-68824: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

CVE-2026-69625: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network...

PT-2026-87626

Name of the Vulnerable Software and Affected Versions Windows Connected User Experiences and Telemetry affected versions not specified Description A heap-based buffer overflow occurs in Windows Connected User Experiences and Telemetry. This issue allows an authorized attacker to elevate privilege...

CVE-2026-69267: Insufficient Granularity of Access Control

Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally...

CVE-2026-69470: Use After Free

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

CVE-2026-69516: Use After Free

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

PT-2026-87264

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

PT-2026-87496

Name of the Vulnerable Software and Affected Versions Windows Connected User Experiences and Telemetry affected versions not specified Description A use-after-free condition exists in Windows Connected User Experiences and Telemetry. This allows an authorized attacker to elevate privileges locall...

CVE-2026-68847: Use After Free

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

htb-labs-connected

HTB: Connected - Staff Pick English | Español 📋 Table of Contents 1. Enumeration 2. Exploitation - CVE-2025-57819 3. Reverse Shell 4. Privilege Escalation 5. Flags 6. Repository Structure 7. Scripts and Tools Used 8. Attack Summary 9. Resources and Credits 10. Additional Notes 1. Enumeration 1.1...