The_Automotive_Threat_Modeling_Template

Background A threat modeling workshop for automotive-related technologies requires DFDs with custom elements, tailored threats and specific recommendations. The lack of a specific template for automotive threat modeling brought about the development of the Automotive Threat Modeling Template, whi...

gdid-reversal

Full writeup of the Windows GDID Global Device Identifier fully reverse engineered -8a2be2 -0078d6 How Microsoft's "Global Device Identifier", the persistent Windows fingerprint named in the July 2026 Scattered Spider complaint, is actually generated, stored, and transmitted. TL;DR !NOTE Listed...

awesome-connected-things-sec

Awesome Connected Things Security Security research and exploitation techniques for IoT, embedded, industrial, and automotive systems. !https://...

CVE-2022-39073

CVE-2022-39073 Firmware details: wainnerversion: BDPOSTEMF286RMODULEV1.0.0B12 crversion: CRITPOSTEMF286RV1.0.0B10 Prerequisites requests pip install requests Command Injection The vulnerability is a shared command injection between the ztenetlinkdetect binary and the WATCHDOGSWITCH handler in the...

CVE-2026-96101

Files or directories accessible to external parties in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally...

CVE-2026-96088

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

CVE-2026-96072

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

CVE-2026-96007

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

CVE-2026-125136

Heap-based buffer overflow in Windows Network Connected Devices Auto-Setup Service allows an unauthorized attacker to execute code over an adjacent network...

CVE-2026-125136

A heap-based buffer overflow vulnerability exists in the Windows Network Connected Devices Auto-Setup Service . This flaw allows an unauthorized attacker to execute arbitrary code over an adjacent network . The issue is addressed in the November 10, 2026 security updates, including KB5131087 for ...

EUVD-2026-122238

Heap-based buffer overflow in Windows Network Connected Devices Auto-Setup Service allows an unauthorized attacker to execute code over an adjacent network...

EUVD-2026-121801

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

CVE-2026-96088

A race condition exists in Windows Connected User Experiences and Telemetry caused by concurrent execution using a shared resource with improper synchronization. This vulnerability allows an authorized attacker to elevate privileges locally . Remediation is available via official security updates...

EUVD-2026-121774

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

CVE-2026-96007

A Use after free vulnerability exists in the Connected Devices Platform Service (Cdpsvc) , which could allow an authorized attacker to perform local privilege escalation . While the documents confirm the existence of the vulnerability and its impact on local privilege levels, they do not provide ...

EUVD-2026-121481

Files or directories accessible to external parties in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally...

CVE-2026-96101

A local information disclosure vulnerability exists in Windows Connected User Experiences and Telemetry (CVE-2026-96101). This flaw allows an authorized attacker to access files or directories that are exposed to external parties, potentially leading to the disclosure of information locally. Whil...

CVE-2026-96072

A use after free vulnerability exists in Windows Connected User Experiences and Telemetry , which could allow an authorized attacker to achieve local privilege elevation . While the specific technical root cause is not detailed in the provided documents, the impact is characterized as HIGH severi...

EUVD-2026-121474

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...