1795 matches found
CVE-2026-68847
A use-after-free vulnerability in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally . The weakness is scored CVSS 3.1 7.0 (HIGH) with a local attack vector, high complexity, and low privileges required. CISA's SSVC assessment indicates no...
EUVD-2026-73191
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...
Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability
Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally...
PT-2026-87264
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...
CVE-2026-68847: Use After Free
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...
PT-2026-87496
Name of the Vulnerable Software and Affected Versions Windows Connected User Experiences and Telemetry affected versions not specified Description A use-after-free condition exists in Windows Connected User Experiences and Telemetry. This allows an authorized attacker to elevate privileges locall...
CVE-2026-69267: Insufficient Granularity of Access Control
Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally...
PT-2026-87284
Name of the Vulnerable Software and Affected Versions Windows Connected User Experiences and Telemetry affected versions not specified Description A use after free issue exists in Windows Connected User Experiences and Telemetry. This allows an authorized attacker to elevate privileges locally on...
CVE-2026-68824: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...
CVE-2026-69625: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network...
CVE-2026-69516: Use After Free
Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...
PT-2026-87626
Name of the Vulnerable Software and Affected Versions Windows Connected User Experiences and Telemetry affected versions not specified Description A heap-based buffer overflow occurs in Windows Connected User Experiences and Telemetry. This issue allows an authorized attacker to elevate privilege...
CVE-2026-69470: Use After Free
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...
htb-labs-connected
HTB: Connected - Staff Pick English | EspaΓ±ol π Table of Contents 1. Enumeration 2. Exploitation - CVE-2025-57819 3. Reverse Shell 4. Privilege Escalation 5. Flags 6. Repository Structure 7. Scripts and Tools Used 8. Attack Summary 9. Resources and Credits 10. Additional Notes 1. Enumeration 1.1...
awesome-connected-things-sec β Updated!
π Awesome Connected Things Security Resources Security research and exploitation techniques for IoT, embedded, industrial, and automotive systems. !https://img.shields.io/badge/%F0%9F%A4%96ROBOTICS-ROS&DDS...
PT-2026-83323
Zephyr's WireGuard implementation in subsys/net/lib/wireguard/wg crypto.c mishandled keepalive packets. In wg process data message, any type-4 transport-data message whose payload was exactly 16 bytes an empty plaintext plus a bare Poly1305 tag, i.e. a keepalive was accepted and returned...
CVE-2026-65976
A flaw was found in Deskflow, a keyboard and mouse sharing application. A connected peer can send repeated data messages to the clipboard receiver, causing it to accumulate data beyond its configured size limit. This excessive data accumulation can lead to the exhaustion of receiver memory,...