208 matches found
Elastic Cloud Enterprise (ECE) 3.8.6 and 4.2.1 Security Update (ESA-2026-218)
Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise ECE Leading to Credential Disclosure Insertion of Sensitive Information into Externally-Accessible File or Directory CWE-538 in Elastic Cloud Enterprise ECE can lead to credential disclosur...
Software Protection Platform Service Privilege Escalation
The vulnerability of the Software Protection Platform Service Sppsvc.exe on Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2026-95943
Double free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-83870
Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally...
CVE-2026-83846
Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-70169
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-100277
Double free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-95943
A double free vulnerability exists in the Connected Devices Platform Service (Cdpsvc) . This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (High) , indicating high impact on confidentiality, integrity, and availability. An official fix is ava...
CVE-2026-83870
The Windows Aggregated Data Platform Service is susceptible to an out-of-bounds read vulnerability (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The vulnerability has a CVSS 3.1 base score of 5.5 (Medium). No sp...
EUVD-2026-100027
Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally...
CVE-2026-83846
A Use after free vulnerability exists in the Connected Devices Platform Service (Cdpsvc) . This flaw allows an authorized attacker to achieve local privilege escalation . No specific technical root cause details, affected versions, or exploit links are provided in the documents. Remediation infor...
EUVD-2026-99385
Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
CVE-2026-70169
A race condition exists in the Windows Connected Devices Platform Service due to concurrent execution using a shared resource with improper synchronization. This vulnerability allows an authorized attacker to achieve local privilege escalation . While the specific root cause components are not de...
EUVD-2026-99190
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...
Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability
Double free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...
Windows Aggregated Data Platform Service Information Disclosure Vulnerability
Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally...
Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability
Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
PT-2026-112274
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...
