49 matches found
CVE-2026-68847: Use After Free
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...
CVE-2026-69267: Insufficient Granularity of Access Control
Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally...
CVE-2026-68824: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...
CVE-2026-69625: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network...
CVE-2026-69470: Use After Free
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...
PT-2026-58400
Name of the Vulnerable Software and Affected Versions Windows Connected User Experiences and Telemetry affected versions not specified Description A type confusion issue occurs when a resource is accessed using an incompatible type. This flaw allows an authorized local attacker to elevate their...
CVE-2026-50421: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...
CVE-2026-21234
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...
CVE-2026-21234
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...
CVE-2026-21234
CVE-2026-21234 concerns Windows Connected Devices Platform Service where a race condition due to improper synchronization enables local privilege escalation for an authorized attacker. The vulnerability affects the platform service's concurrent execution via a shared resource; impact includes con...
CVE-2026-21234 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
...
CVE-2026-21234: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...
CVE-2026-20864 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
...
CVE-2025-58727
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...
CVE-2025-58727
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...
CVE-2025-55326 Windows Connected Devices Platform Service (Cdpsvc) Remote Code Execution Vulnerability
...
CVE-2025-58719 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
...
CVE-2025-58727: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...
