CVE-2026-27199-werkzeug-safe-join-bypass-PoC

CVE-2026-27199 PoC: Werkzeug safejoin Windows Device-Name Bypass Status: Publicly disclosed. Fixed in werkzeug 3.1.6. Severity: Moderate Reporter: @alimezar Advisory: GHSA-29vq-49wr-vm6x Affected Versions Package| Affected| Patched ---|---|--- werkzeug| Requires: Windows, Python 3.8+, werkzeug No...

CVE-2026-96854

Access of resource using incompatible type 'type confusion' in Windows Device Association Service allows an authorized attacker to disclose information locally...

CVE-2026-85904

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-85815

Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally...

CVE-2026-85352

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-85342

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-85336

Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally...

CVE-2026-85331

Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network...

CVE-2026-85332

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-84014

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83792

Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83710

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-96854

A type confusion vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to perform an information disclosure locally by accessing a resource using an incompatible type. The vulnerability is associated with CWE-843 and has a CVSS 3.1 base score of ...

CVE-2026-70227

An out-of-bounds read vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to perform a local information disclosure, potentially revealing sensitive data. No specific exploit code or in-the-wild exploitation details are provided in the document...

CVE-2026-83792

An incorrect authorization flaw exists in the Windows Device Install Service , which allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-863 and has been assigned a high severity score of 7.8. While the specific root cause and affected ver...

CVE-2026-85904

A race condition vulnerability exists in the Windows Device Association Service due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-362 (Race Cond...

CVE-2026-83710

A Use after free vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to achieve local privilege escalation . While the CVSS score indicates a High severity (7.0), specific details regarding the underlying component or file are not provided. Exp...

CVE-2026-85815

The Windows Device Association Service is affected by an out-of-bounds read vulnerability (CWE-125). This flaw allows an authorized attacker to disclose information locally . No specific exploitation details, exploit links, or remediations are provided in the documentation beyond the existence of...

CVE-2026-85352

A Use after free vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to achieve local privilege escalation . No specific versions, root causes, or exploit links are provided in the documents, but an official fix is indicated by the remediation ...

CVE-2026-85342

A Use after free vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.0 (High) , with a local attack vector and high complexity. No specific exploitations or exploit links are provid...