108 matches found
CVE-2026-69791
CVE-2026-69791 is a use-after-free vulnerability in the Windows Device Association Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 base score of 7.0 (HIGH) , with a local attack vector, high complexity, low privileges require...
CVE-2026-69581
CVE-2026-69581 is a use-after-free vulnerability in the Windows Device Association Service that allows an authorized, locally authenticated attacker to elevate privileges . The attack requires low privileges , involves high complexity , and needs no user interaction , with unchanged scope but hig...
EUVD-2026-73541
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73522
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69488
A use-after-free vulnerability in the Windows Device Association Service allows an authorized local attacker to escalate privileges . The CVSS 3.1 score is 7.0 (HIGH) , with a local attack vector, high complexity, low required privileges, and no user interaction, yielding high impact on confident...
CVE-2026-69478
CVE-2026-69478 is a heap-based buffer overflow in the Windows Device Association Service that allows an authorized attacker to elevate privileges locally . The vulnerability is rated CVSS 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, resulting in high impact ...
EUVD-2026-73517
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73440
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network...
CVE-2026-69314
CVE-2026-69314 is a use-after-free vulnerability in the Windows Device Association Broker service that allows an authorized attacker to elevate privileges over a network . The vulnerability carries a CVSS 3.1 score of 7.1 (HIGH) , with an attack vector of Network, High complexity, Low privileges ...
CVE-2026-77500
A release of invalid pointer or reference vulnerability in the Windows Device Association Service allows an authorized attacker to escalate privileges locally. The flaw is rated CVSS 7.8 (High) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning an attacker with low local privileges and...
EUVD-2026-73268
Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73042
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69711
CVE-2026-69711 is a use after free vulnerability in the Windows Device Association Service that allows an authorized local attacker with low privileges to achieve privilege escalation . The attack requires high complexity and no user interaction, with high impact on confidentiality, integrity, an...
EUVD-2026-73039
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally...
CVE-2026-69693
A use-after-free flaw in the Windows Device Association Broker service allows an authorized local attacker to achieve privilege escalation . The vulnerability is rated HIGH (CVSS 3.1: 7.0) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H , indicating that exploitation requires high attack com...
CVE-2026-69574
CVE-2026-69574 is a use-after-free vulnerability in the Windows Device Association Service that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 base score is 7.0 (HIGH) , with high impact to confidentiality, integrity, and availability, but the attack requires l...
EUVD-2026-73012
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69296
A use-after-free vulnerability in Windows Device Association Service allows an authorized attacker to escalate privileges over a network. The flaw requires low privileges, user interaction, and high attack complexity, yielding a CVSS 3.1 score of 7.1 (HIGH) with full impact on confidentiality, in...
