CVE Catalog

CVE-2026-62747

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.31%

24th percentile - higher than 24% of all known CVEs

Summary

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Risk Assessment

An attacker could exploit the buffer overflow to execute code with elevated privileges.

Recommendation

Apply the latest Windows security updates.

Original NVD description (English source)

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS