CVE-2026-21234: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

CVE-2025-55326 Windows Connected Devices Platform Service (Cdpsvc) Remote Code Execution Vulnerability

...

CVE-2025-58727: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

CVE-2025-54114: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

CVE-2025-53721: Use After Free

Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

CVE-2025-49724: Use After Free

Use after free in Windows Connected Devices Platform Service allows an unauthorized attacker to execute code over a network...

CVE-2025-48000: Use After Free

Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

CVE-2025-21207

Technical details about CVE-2025-21207 (Windows Cdpsvc DoS) are not publicly disclosed in the provided documents. Monitor updates from Microsoft and CVE pages for affected versions, impact details, and fixes.