CVE-2026-69267: Insufficient Granularity of Access Control

Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally...

CVE-2026-68847: Use After Free

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

CVE-2026-68824: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

CVE-2026-69625: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network...

CVE-2026-69470: Use After Free

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

CVE-2026-50421: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

CVE-2022-24479: Undefined Security Weakness

Connected User Experiences and Telemetry Elevation of Privilege Vulnerability...

CVE-2020-1590: Undefined Security Weakness

An elevation of privilege vulnerability exists when the Connected User Experiences and Telemetry Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges on the victim system. To exploit the vulnerability, an attacker wou...

CVE-2020-1511: Undefined Security Weakness

An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a...

PT-2020-3175

Name of the Vulnerable Software and Affected Versions Windows Connected User Experiences and Telemetry Service affected versions not specified Description The issue is related to improper disclosure of file information by the Windows Connected User Experiences and Telemetry Service, which can lea...

CVE-2020-1386: Undefined Security Weakness

An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, aka 'Connected User Experiences and Telemetry Service Information Disclosure Vulnerability'...

PT-2020-3557

Name of the Vulnerable Software and Affected Versions Connected User Experiences and Telemetry Service affected versions not specified Description The issue is related to improper handling of file operations by the Connected User Experiences and Telemetry Service, which can lead to a denial of...

CVE-2020-1244: Undefined Security Weakness

A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Denial of Service Vulnerability'. This CVE ID is unique from CVE-2020-1120...

CVE-2020-1120: Undefined Security Weakness

A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Denial of Service Vulnerability'. This CVE ID is unique from CVE-2020-1244...

CVE-2020-1123: Undefined Security Weakness

A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations. An attacker who successfully exploited this vulnerability could cause a system to stop responding. To exploit the vulnerability, an attacker would first have to log o...

CVE-2020-1084: Improper Input Validation

A Denial Of Service vulnerability exists when Connected User Experiences and Telemetry Service fails to validate certain function values. An attacker who successfully exploited this vulnerability could deny dependent security feature functionality. To exploit this vulnerability, an attacker would...

PT-2020-2828

Name of the Vulnerable Software and Affected Versions Connected User Experiences and Telemetry Service affected versions not specified Description A Denial Of Service issue exists due to the Connected User Experiences and Telemetry Service's failure to properly validate certain function values. A...

PT-2020-2700

Name of the Vulnerable Software and Affected Versions Connected User Experiences and Telemetry Service affected versions not specified Description The issue is related to improper handling of file operations by the Connected User Experiences and Telemetry Service, which can lead to a denial of...

KB4551853: Windows 10 Version 1809 and Windows Server 2019 May 2020 Security Update

The remote Windows host is missing security update 4551853. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a...

CVE-2020-0942

CVE-2020-0942 is an Elevation of Privilege vulnerability in the Windows Connected User Experiences and Telemetry Service caused by improper handling of file operations. According to CNVD/NVD entries, exploitation would allow a locally authenticated attacker to execute code with elevated privilege...