CVE-2026-27199-werkzeug-safe-join-bypass-PoC

CVE-2026-27199 PoC: Werkzeug safejoin Windows Device-Name Bypass Status: Publicly disclosed. Fixed in werkzeug 3.1.6. Severity: Moderate Reporter: @alimezar Advisory: GHSA-29vq-49wr-vm6x Affected Versions...

CVE-2026-83940

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69693

Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally...

CVE-2026-69581

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69314

Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network...

CVE-2026-69711

CVE-2026-69711 is a use after free vulnerability in the Windows Device Association Service that allows an authorized local attacker with low privileges to achieve privilege escalation . The attack requires high complexity and no user interaction, with high impact on confidentiality, integrity, an...

Windows Device Association Service Elevation of Privilege Vulnerability

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network...

Windows Device Association Service Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network...

Windows Device Association Service Elevation of Privilege Vulnerability

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

Windows Device Association Service Elevation of Privilege Vulnerability

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-62747

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-66802 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

...

EUVD-2026-56633

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-62747 Windows Device Association Service Elevation of Privilege Vulnerability

...

Windows Device Association Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

PT-2026-70507

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows Device Association Service. This issue allows an authorized attacker to elevate privileges locally on the system....

PT-2026-70473

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows Device Association Service. This issue allows an authorized attacker to elevate privileges locally on the system....

PYSEC-2026-2044 Werkzeug safe_join() allows Windows special device names with compound extensions

Werkzeug's safejoin function allows path segments with Windows device names that have file extensions or trailing spaces. On Windows, there are special device names such as CON, AUX, etc that are implicitly present and readable in every directory. Windows still accepts them with any file extensio...

PYSEC-2026-2046 Werkzeug safe_join() allows Windows special device names

Werkzeug's safejoin function allows path segments with Windows device names. On Windows, there are special device names such as CON, AUX, etc that are implicitly present and readable in every directory. sendfromdirectory uses safejoin to safely serve files at user-specified paths under a director...

Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker

U.S. prosecutors linked an alleged Scattered Spider hacker to a break-in at a luxury jewelry retailer using a persistent Windows device ID, according to a newly unsealed federal complaint. Microsoft records tied that ID first to the account the attackers used to keep access during the May 2025...