32 matches found
CdpSvcLPE
CdpSvcLPE Windows Local Privilege Escalation via CdpSvc service Writeable SYSTEM path Dll Hijacking Short Description: Connected Devices Platform Service or CDPSvc is a service which runs as NT AUTHORITY\LOCAL SERVICE and tries to load the missing cdpsgshims.dll DLL on startup with a call to...
CVE-2026-95943
Double free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-83846
Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-95943
A double free vulnerability exists in the Connected Devices Platform Service (Cdpsvc) . This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (High) , indicating high impact on confidentiality, integrity, and availability. An official fix is ava...
CVE-2026-83846
A Use after free vulnerability exists in the Connected Devices Platform Service (Cdpsvc) . This flaw allows an authorized attacker to achieve local privilege escalation . No specific technical root cause details, affected versions, or exploit links are provided in the documents. Remediation infor...
Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability
Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability
Double free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-95943: Double Free
Double free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-95943: Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability
Double free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-83846: Use After Free
Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-69516
Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-69516
CVE-2026-69516 is a use-after-free vulnerability in the Connected Devices Platform Service (Cdpsvc) , a Windows component. An authorized local attacker can exploit this to achieve privilege escalation , with high impact on confidentiality, integrity, and availability (CVSS 3.1: 7.0 HIGH ; vector ...
EUVD-2026-73003
Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability
Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
PT-2026-87535
Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-69516: Use After Free
Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-24292: Use After Free
Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-20864: Heap-based Buffer Overflow
Heap-based buffer overflow in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...