CVE-2025-24076

CVE-2025-24076 Microsoft Windows Cross Device Service - Exploit della vulnerabilità di elevazione dei privilegi Panoramica Questo script sfrutta una vulnerabilità nel Windows Cross Device Service che consente l'elevazione dei privilegi su sistemi Windows 11 , Windows Server 2025 e Windows Server...

Exploit for CVE-2026-66804

CVE-2026-66804: Cross Device Virtual Camera EoP A standard Wi...

CVE-2026-66804

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-56595

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally...

CVE-2026-66804 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

...

CVE-2026-66804

Technical details about CVE-2026-66804 are not publicly available in the provided documents. Monitor for updates from Microsoft and NVD for affected products, vulnerable component, impact, and remediation.

CVE-2026-66804 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

...

PT-2026-70703

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Description Improper access control in the Windows Cross Device Service allows an authorized attacker to elevate privileges locally. The issue occurs because a standard user can create the...

CVE-2026-34121

An authentication bypass vulnerability within the HTTP handling of the DS configuration service in TP-Link Tapo C520WS v2.6 was identified, due to inconsistent parsing and authorization logic in JSON requests during authentication check. An unauthenticated attacker can append an...

CVE-2026-34121

An authentication bypass vulnerability within the HTTP handling of the DS configuration service in TP-Link Tapo C520WS v2.6 was identified, due to inconsistent parsing and authorization logic in JSON requests during authentication check. An unauthenticated attacker can append an...

CVE-2026-24296

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2025-48654

In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2021-47878

eBeam Education Suite 2.5.0.9 contains an unquoted service path vulnerability in the eBeam Device Service that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious code that would execute...

CVE-2021-47878

CVE-2021-47878 affects eBeam Education Suite 2.5.0.9, specifically the eBeam Device Service. The issue is an unquoted service path that can allow a local attacker to execute code with LocalSystem privileges during service startup. CVSS metrics provided indicate high impact for confidentiality, in...

CVE-2021-47878 eBeam Education Suite 2.5.0.9 - 'eBeam Device Service' Unquoted Service Path

eBeam Education Suite 2.5.0.9 contains an unquoted service path vulnerability in the eBeam Device Service that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious code that would execute...

CVE-2021-47878 eBeam Education Suite 2.5.0.9 - 'eBeam Device Service' Unquoted Service Path

eBeam Education Suite 2.5.0.9 contains an unquoted service path vulnerability in the eBeam Device Service that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious code that would execute...

CVE-2021-47878

eBeam Education Suite 2.5.0.9 contains an unquoted service path vulnerability in the eBeam Device Service that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious code that would execute...

EUVD-2026-3614

eBeam Education Suite 2.5.0.9 contains an unquoted service path vulnerability in the eBeam Device Service that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious code that would execute...

Luidia eBeam Education Suite code-related vulnerabilities

The Luidia eBeam Education Suite is an interactive teaching software suite developed by Luidia Corporation. Version 2.5.0.9 of the Luidia eBeam Education Suite contains a code vulnerability. This vulnerability stems from the eBeam Device Service having a service path that lacks quotation marks,...

PT-2026-3830

eBeam Education Suite 2.5.0.9 contains an unquoted service path vulnerability in the eBeam Device Service that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious code that would execute...