CVE-2026-70169

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70169

A race condition exists in the Windows Connected Devices Platform Service due to concurrent execution using a shared resource with improper synchronization. This vulnerability allows an authorized attacker to achieve local privilege escalation . While the specific root cause components are not de...

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

CVE-2026-21234: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

CVE-2025-55326 Windows Connected Devices Platform Service (Cdpsvc) Remote Code Execution Vulnerability

...

CVE-2025-58727: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

CVE-2025-54114: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

CVE-2025-53721: Use After Free

Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

CVE-2025-48000: Use After Free

Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

CVE-2025-49724: Use After Free

Use after free in Windows Connected Devices Platform Service allows an unauthorized attacker to execute code over a network...

CVE-2025-21207

Technical details about CVE-2025-21207 (Windows Cdpsvc DoS) are not publicly disclosed in the provided documents. Monitor updates from Microsoft and CVE pages for affected versions, impact details, and fixes.

PT-2025-1213

Name of the Vulnerable Software and Affected Versions Windows Connected Devices Platform Service Cdpsvc affected versions not specified Description The issue is related to an uncontrolled consumption of resources in the Windows Connected Devices Platform Service Cdpsvc component of the Microsoft...

CVE-2025-21207: Uncontrolled Resource Consumption

Windows Connected Devices Platform Service Cdpsvc Denial of Service Vulnerability...

CVE-2022-30212: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Connected Devices Platform Service Information Disclosure Vulnerability...

PT-2020-2744

Name of the Vulnerable Software and Affected Versions Windows Connected Devices Platform Service affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the way the Connected Devices Platform Service handles objects in memory. This...