66 matches found
CVE-2026-96854
Access of resource using incompatible type 'type confusion' in Windows Device Association Service allows an authorized attacker to disclose information locally...
CVE-2026-96854
A type confusion vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to perform an information disclosure locally by accessing a resource using an incompatible type. The vulnerability is associated with CWE-843 and has a CVSS 3.1 base score of ...
CVE-2026-70227
An out-of-bounds read vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to perform a local information disclosure, potentially revealing sensitive data. No specific exploit code or in-the-wild exploitation details are provided in the document...
CVE-2026-85904
A race condition vulnerability exists in the Windows Device Association Service due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-362 (Race Cond...
CVE-2026-83710
A Use after free vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to achieve local privilege escalation . While the CVSS score indicates a High severity (7.0), specific details regarding the underlying component or file are not provided. Exp...
CVE-2026-85815
The Windows Device Association Service is affected by an out-of-bounds read vulnerability (CWE-125). This flaw allows an authorized attacker to disclose information locally . No specific exploitation details, exploit links, or remediations are provided in the documentation beyond the existence of...
CVE-2026-85352
A Use after free vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to achieve local privilege escalation . No specific versions, root causes, or exploit links are provided in the documents, but an official fix is indicated by the remediation ...
CVE-2026-85336
An out-of-bounds read vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to perform a local information disclosure by reading data outside of intended boundaries. The vulnerability is assigned CWE-125 and has been confirmed by Microsoft. No sp...
CVE-2026-85342
A Use after free vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.0 (High) , with a local attack vector and high complexity. No specific exploitations or exploit links are provid...
CVE-2026-85332
A Use after free vulnerability in the Windows Device Association Service allows an authorized attacker to achieve local privilege escalation . The vulnerability's impact includes high severity for confidentiality, integrity, and availability. A remediation is available via an official fix ; howev...
CVE-2026-85331
An out-of-bounds read vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to disclose information over a network. While the base severity is rated as MEDIUM (CVSS 3.1: 6.5), the confidentiality impact is noted as HIGH . No specific exploit deta...
CVE-2026-84014
A Heap-based buffer overflow exists in the Windows Device Association Service . This vulnerability allows an authorized attacker to achieve local privilege elevation . The issue is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-362 (Race Condition). No specific exploit links or deta...
Windows Device Association Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
PT-2026-112733
Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A use after free issue in the Windows Device Association Service allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption...
PT-2026-112731
Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A use after free issue in the Windows Device Association Service allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption...
PT-2026-112725
Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description An out-of-bounds read in the Windows Device Association Service allows an authorized attacker to disclose information locally. An out-of-bounds read occurs when a...
PT-2026-112721
Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description An out-of-bounds read in the Windows Device Association Service allows an authorized attacker to disclose information over a network. An out-of-bounds read occurs...
PT-2026-112722
Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A use after free issue in the Windows Device Association Service allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption...
PT-2026-112703
Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A heap-based buffer overflow exists in the Windows Device Association Service. This flaw allows an authorized attacker to elevate privileges locally. A heap-based...