The vulnerability of the Connected Devices Platform Service (CDPSvc) in Microsoft Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Connected Devices Platform Service CDPSvc in Microsoft Windows operating systems is related to the possibility of using memory after it has been freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2025-49724

Use after free in Windows Connected Devices Platform Service allows an unauthorized attacker to execute code over a network...

CVE-2025-49724

Use after free in Windows Connected Devices Platform Service allows an unauthorized attacker to execute code over a network...

CVE-2025-48000

Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

CVE-2025-48000

Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

CVE-2025-49724 Windows Connected Devices Platform Service Remote Code Execution Vulnerability

...

CVE-2025-49724

CVE-2025-49724 is a Use-After-Free vulnerability in Windows Connected Devices Platform Service that can lead to remote code execution over the network. According to initial data, impact is high (C/H/I/A) with CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U. Connected documents confirm the vulnerability exists ...

CVE-2025-48000 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

...

CVE-2025-48000 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

...

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

Windows Connected Devices Platform Service Remote Code Execution Vulnerability

Use after free in Windows Connected Devices Platform Service allows an unauthorized attacker to execute code over a network...

CVE-2025-49724: Use After Free

Use after free in Windows Connected Devices Platform Service allows an unauthorized attacker to execute code over a network...

PT-2025-28529

Name of the Vulnerable Software and Affected Versions: Windows Connected Devices Platform Service affected versions not specified Description: The issue is related to a use after free condition in the Windows Connected Devices Platform Service, which allows an authorized attacker to elevate...

PT-2025-28613 · Microsoft · Windows Connected Devices Platform Service +1

Name of the Vulnerable Software and Affected Versions: Windows Connected Devices Platform Service affected versions not specified Description: The issue is related to a use after free condition in the Windows Connected Devices Platform Service, which allows an unauthorized attacker to execute cod...

CVE-2025-48000: Use After Free

Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

CVE-2024-52033

Exposure of sensitive system information to an unauthorized control sphere issue exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerability is exploited, a remote unauthenticated attacker may obtain information of the other devices connected through the Wi-Fi...

CVE-2020-0743

An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connected Devices Platform Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0740, CVE-2020-0741, CVE-2020-0742, CVE-2020-0749,...

CVE-2020-0750

An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connected Devices Platform Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0740, CVE-2020-0741, CVE-2020-0742, CVE-2020-0743,...

CVE-2020-0740

An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connected Devices Platform Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0741, CVE-2020-0742, CVE-2020-0743, CVE-2020-0749,...

CVE-2020-0749

An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connected Devices Platform Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0740, CVE-2020-0741, CVE-2020-0742, CVE-2020-0743,...