Software Protection Platform Service Privilege Escalation

The vulnerability of the Software Protection Platform Service Sppsvc.exe on Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2026-95943

Double free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

CVE-2026-83870

Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally...

CVE-2026-83846

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

CVE-2026-70169

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

CVE-2026-95943

A double free vulnerability exists in the Connected Devices Platform Service (Cdpsvc) . This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (High) , indicating high impact on confidentiality, integrity, and availability. An official fix is ava...

EUVD-2026-100277

Double free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

CVE-2026-83870

The Windows Aggregated Data Platform Service is susceptible to an out-of-bounds read vulnerability (CWE-125). This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The vulnerability has a CVSS 3.1 base score of 5.5 (Medium). No sp...

EUVD-2026-100027

Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally...

CVE-2026-83846

A Use after free vulnerability exists in the Connected Devices Platform Service (Cdpsvc) . This flaw allows an authorized attacker to achieve local privilege escalation . No specific technical root cause details, affected versions, or exploit links are provided in the documents. Remediation infor...

EUVD-2026-99385

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

EUVD-2026-99190

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70169

A race condition exists in the Windows Connected Devices Platform Service due to concurrent execution using a shared resource with improper synchronization. This vulnerability allows an authorized attacker to achieve local privilege escalation . While the specific root cause components are not de...

Windows Aggregated Data Platform Service Information Disclosure Vulnerability

Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally...

Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability

Double free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

CVE-2026-70169: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...

CVE-2026-95943: Double Free

Double free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83870: Windows Aggregated Data Platform Service Information Disclosure Vulnerability

Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally...