1881 matches found
CVE-2025-58724
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...
CVE-2025-55326
Use after free in Connected Devices Platform Service Cdpsvc allows an unauthorized attacker to execute code over a network...
CVE-2025-55326
Use after free in Connected Devices Platform Service Cdpsvc allows an unauthorized attacker to execute code over a network...
CVE-2025-47989
Improper access control in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally...
CVE-2025-59191 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
...
CVE-2025-59191 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
...
CVE-2025-59191
CVE-2025-59191 is a Windows security vulnerability in the Connected Devices Platform Service (Cdpsvc). It is described as a heap-based buffer overflow that, when exploited by an authenticated local attacker, enables elevation of privileges. The CVE is documented with a high impact (local, privile...
CVE-2025-58727 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
...
CVE-2025-58727 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
...
CVE-2025-58727
CVE-2025-58727 describes a race-condition in the Windows Connected Devices Platform Service (Cdpsvc) that allows an authenticated, local attacker to elevate privileges. The issue originates from concurrent execution using a shared resource without proper synchronization. Documents identify the af...
CVE-2025-58724 Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
CVE-2025-58724 Arc Enabled Servers - Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
CVE-2025-58724
CVE-2025-58724 : Affects Azure Connected Machine Agent. Description confirms an improper access control flaw that enables an authorized local attacker to escalate privileges. CVSS v3.1/3.1 base score 7.8 (HIGH) with local, low complexity, and no user interaction requirements; impact on confidenti...
CVE-2025-55326 Windows Connected Devices Platform Service (Cdpsvc) Remote Code Execution Vulnerability
...
CVE-2025-55326
CVE-2025-55326 is a Windows Cdpsvc (Connected Devices Platform Service) use-after-free vulnerability enabling remote code execution over a network. The provided connected documents confirm the issue, its network vector and a high risk (CVSS 3.1: 7.5, network attack, no privileges). Remediation in...
CVE-2025-55326 Windows Connected Devices Platform Service (Cdpsvc) Remote Code Execution Vulnerability
...
CVE-2025-58719 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
...
CVE-2025-58719 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
...
CVE-2025-58719
CVE-2025-58719 affects the Connected Devices Platform Service (Cdpsvc) in Windows. The issue is a use-after-free vulnerability that could allow an authorized local attacker to achieve privilege elevation. The connected documents confirm the vulnerability and its local impact, but do not provide e...