141 matches found
CVE-2026-96854
Access of resource using incompatible type 'type confusion' in Windows Device Association Service allows an authorized attacker to disclose information locally...
CVE-2026-85904
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-85815
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally...
CVE-2026-85342
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-85352
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-85336
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally...
CVE-2026-85331
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network...
CVE-2026-85332
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-84014
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83710
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
CVE-2026-96854
A type confusion vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to perform an information disclosure locally by accessing a resource using an incompatible type. The vulnerability is associated with CWE-843 and has a CVSS 3.1 base score of ...
CVE-2026-70227
An out-of-bounds read vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to perform a local information disclosure, potentially revealing sensitive data. No specific exploit code or in-the-wild exploitation details are provided in the document...
CVE-2026-85904
A race condition vulnerability exists in the Windows Device Association Service due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-362 (Race Cond...
CVE-2026-83710
A Use after free vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to achieve local privilege escalation . While the CVSS score indicates a High severity (7.0), specific details regarding the underlying component or file are not provided. Exp...
CVE-2026-85815
The Windows Device Association Service is affected by an out-of-bounds read vulnerability (CWE-125). This flaw allows an authorized attacker to disclose information locally . No specific exploitation details, exploit links, or remediations are provided in the documentation beyond the existence of...
CVE-2026-85336
An out-of-bounds read vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to perform a local information disclosure by reading data outside of intended boundaries. The vulnerability is assigned CWE-125 and has been confirmed by Microsoft. No sp...
CVE-2026-85332
A Use after free vulnerability in the Windows Device Association Service allows an authorized attacker to achieve local privilege escalation . The vulnerability's impact includes high severity for confidentiality, integrity, and availability. A remediation is available via an official fix ; howev...
CVE-2026-85342
A Use after free vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.0 (High) , with a local attack vector and high complexity. No specific exploitations or exploit links are provid...
CVE-2026-85352
A Use after free vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to achieve local privilege escalation . No specific versions, root causes, or exploit links are provided in the documents, but an official fix is indicated by the remediation ...
CVE-2026-85331
An out-of-bounds read vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to disclose information over a network. While the base severity is rated as MEDIUM (CVSS 3.1: 6.5), the confidentiality impact is noted as HIGH . No specific exploit deta...