Lucene search
+L

137 matches found

Kitploit
Kitploit
•added 2026/09/25 10:11 a.m.•23 views

gdid-reversal

Windows GDID 完整分析报告 全局设备标识符完全逆向工程 -8a2be2 -0078d6 微软的“全局设备标识符”——2026年7月Scattered Spider起诉书中提到的持久性Windows指纹——实际是如何生成、存储和传输的。 TL;DR !NOTE 以下内容属实,但缺少部分信息。无论是否使用MSA登录,你都会拥有一个GDID。我发帖时并未意识到这一点,但后来查证了。CDP有一个匿名设备路径,如果未连接MSA则会使用该路径。底层系统在事实上仍然是正确的,只是缺少了一些内容。 GDID是真实的遥测项。 它出现在美国联邦刑事起诉书( United States v...

6.1AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•1 views

CVE-2026-69516: Use After Free

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

7CVSS6.1AI score0.0027EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/03/26 3:00 p.m.•16 views

CVE-2026-24292

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00338EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/03/13 12:00 a.m.•19 views

The vulnerability of the Connected Devices Platform Service for Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Connected Devices Platform Service for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS5.8AI score0.00338EPSS
SaveExploits0References2Affected Software14
EUVD
EUVD
•added 2026/03/10 6:31 p.m.•21 views

EUVD-2026-10617

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00338EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/03/10 5:04 p.m.•6 views

CVE-2026-24292

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00338EPSS
SaveExploits0References2Affected Software14
Vulnrichment
Vulnrichment
•added 2026/03/10 5:04 p.m.•6 views

CVE-2026-24292 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

...

7.8CVSS5.8AI score0.00338EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/10 12:00 a.m.•15 views

PT-2026-24286

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00338EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/10 12:00 a.m.•1 views

CVE-2026-24292: Use After Free

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00338EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/02/13 12:00 a.m.•11 views

The vulnerability of the Connected Devices Platform Service for Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Connected Devices Platform Service for Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS5.8AI score0.00271EPSS
SaveExploits0References2Affected Software14
Kaspersky
Kaspersky
•added 2026/02/10 12:00 a.m.•85 views

KLA90878 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, bypass security restrictions, spoof user interface, obtain sensitive information, cause denial of service. Below is a...

8.8CVSS6.5AI score0.26244EPSS
SaveExploits9References38
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/10 12:00 a.m.•1 views

CVE-2026-21234: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

7CVSS6.9AI score0.00271EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/01/15 12:00 a.m.•14 views

The vulnerability of the Connected Devices Platform Service (CDPSvc) in Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the Connected Devices Platform Service CDPSvc in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS6AI score0.00561EPSS
SaveExploits0References2Affected Software13
OSV
OSV
•added 2026/01/13 6:16 p.m.•12 views

CVE-2026-20864

Heap-based buffer overflow in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

7.8CVSS6AI score0.00561EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/13 5:56 p.m.•41 views

CVE-2026-20864 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

...

7.8CVSS0.00561EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/13 5:56 p.m.•7 views

CVE-2026-20864

Heap-based buffer overflow in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00561EPSS
SaveExploits0References2Affected Software12
CVE
CVE
•added 2026/01/13 5:56 p.m.•74 views

CVE-2026-20864

CVE-2026-20864 describes a heap-based buffer overflow in the Connected Devices Platform Service (Cdpsvc) on Windows that enables an authorized local attacker to elevate privileges. The vulnerability affects Cdpsvc and is rated high (CVSS v3.1 base 7.8; Local, Low Attack Complexity, Privileges Req...

7.8CVSS7AI score0.00561EPSS
SaveExploits0References3Affected Software10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/13 12:00 a.m.•1 views

CVE-2026-20864: Heap-based Buffer Overflow

Heap-based buffer overflow in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

7.8CVSS7.5AI score0.00561EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/01/13 12:00 a.m.•12 views

PT-2026-2709

Name of the Vulnerable Software and Affected Versions Connected Devices Platform Service Cdpsvc affected versions not specified Description A heap-based buffer overflow exists in the Connected Devices Platform Service Cdpsvc. This condition allows a locally authenticated attacker to gain elevated...

7.8CVSS6.8AI score0.00561EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
•added 2025/10/23 12:00 a.m.•13 views

The vulnerability of the Connected Devices Platform Service (CDPSvc) in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Connected Devices Platform Service CDPSvc in Windows operating systems relates to the possibility of using memory after it has been freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

7.6CVSS7.5AI score0.00845EPSS
SaveExploits0References2Affected Software13
Rows per page
Query Builder