CVE Catalog
CVE-2026-20864
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0.53%
42th percentile - higher than 42% of all known CVEs
Summary
Heap-based buffer overflow in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with appropriate permissions may gain elevated privileges in the system, potentially leading to serious security breaches.
Recommendation
It is recommended to monitor and update the Cdpsvc service to mitigate this vulnerability and restrict access to it only for trusted users.
Other vulnerabilities in Connected Devices Platform Service (Cdpsvc)
Original NVD description (English source)
Heap-based buffer overflow in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS