67 matches found
CVE-2026-83687
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...
CVE-2026-70169
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83687
A Use after free vulnerability in Windows Connected User Experiences and Telemetry allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 . Remediation is available via an official fix provided by Microsoft. No specific exploit details...
CVE-2026-70169
A race condition exists in the Windows Connected Devices Platform Service due to concurrent execution using a shared resource with improper synchronization. This vulnerability allows an authorized attacker to achieve local privilege escalation . While the specific root cause components are not de...
Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83687: Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...
CVE-2026-83687: Use After Free
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...
PT-2026-112491
Name of the Vulnerable Software and Affected Versions Windows Connected User Experiences and Telemetry affected versions not specified Description A use-after-free condition exists in Windows Connected User Experiences and Telemetry. This allows an authorized attacker to elevate privileges locall...
CVE-2026-70169: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69267: Insufficient Granularity of Access Control
Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally...
CVE-2026-68824: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...
CVE-2026-69625: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges over a network...
CVE-2026-68847: Use After Free
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...
CVE-2026-69470: Use After Free
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...
PT-2026-58400
Name of the Vulnerable Software and Affected Versions Windows Connected User Experiences and Telemetry affected versions not specified Description A type confusion issue occurs when a resource is accessed using an incompatible type. This flaw allows an authorized local attacker to elevate their...
CVE-2026-50421: Access of Resource Using Incompatible Type
Access of resource using incompatible type 'type confusion' in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...
CVE-2026-21234
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...
CVE-2026-21234
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally...
