CVE-2026-96854

Access of resource using incompatible type 'type confusion' in Windows Device Association Service allows an authorized attacker to disclose information locally...

CVE-2026-96854

A type confusion vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to perform an information disclosure locally by accessing a resource using an incompatible type. The vulnerability is associated with CWE-843 and has a CVSS 3.1 base score of ...

CVE-2026-70227

An out-of-bounds read vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to perform a local information disclosure, potentially revealing sensitive data. No specific exploit code or in-the-wild exploitation details are provided in the document...

CVE-2026-83710

A Use after free vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to achieve local privilege escalation . While the CVSS score indicates a High severity (7.0), specific details regarding the underlying component or file are not provided. Exp...

CVE-2026-85904

A race condition vulnerability exists in the Windows Device Association Service due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-362 (Race Cond...

CVE-2026-85815

The Windows Device Association Service is affected by an out-of-bounds read vulnerability (CWE-125). This flaw allows an authorized attacker to disclose information locally . No specific exploitation details, exploit links, or remediations are provided in the documentation beyond the existence of...

CVE-2026-85342

A Use after free vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.0 (High) , with a local attack vector and high complexity. No specific exploitations or exploit links are provid...

CVE-2026-85332

A Use after free vulnerability in the Windows Device Association Service allows an authorized attacker to achieve local privilege escalation . The vulnerability's impact includes high severity for confidentiality, integrity, and availability. A remediation is available via an official fix ; howev...

CVE-2026-85336

An out-of-bounds read vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to perform a local information disclosure by reading data outside of intended boundaries. The vulnerability is assigned CWE-125 and has been confirmed by Microsoft. No sp...

CVE-2026-85352

A Use after free vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to achieve local privilege escalation . No specific versions, root causes, or exploit links are provided in the documents, but an official fix is indicated by the remediation ...

CVE-2026-85331

An out-of-bounds read vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to disclose information over a network. While the base severity is rated as MEDIUM (CVSS 3.1: 6.5), the confidentiality impact is noted as HIGH . No specific exploit deta...

CVE-2026-84014

A Heap-based buffer overflow exists in the Windows Device Association Service . This vulnerability allows an authorized attacker to achieve local privilege elevation . The issue is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-362 (Race Condition). No specific exploit links or deta...

Windows Device Association Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

PT-2026-112725

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description An out-of-bounds read in the Windows Device Association Service allows an authorized attacker to disclose information locally. An out-of-bounds read occurs when a...

PT-2026-112722

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A use after free issue in the Windows Device Association Service allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption...

PT-2026-112731

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A use after free issue in the Windows Device Association Service allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption...

PT-2026-112733

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A use after free issue in the Windows Device Association Service allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption...

PT-2026-112703

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A heap-based buffer overflow exists in the Windows Device Association Service. This flaw allows an authorized attacker to elevate privileges locally. A heap-based...

PT-2026-112721

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description An out-of-bounds read in the Windows Device Association Service allows an authorized attacker to disclose information over a network. An out-of-bounds read occurs...

The vulnerability of the Device Association Service in Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Device Association Service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...