CVE-2026-69478
HighCVSS 7.8Summary
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could escalate privileges and take control of the system, potentially leading to data theft or malware installation.
Recommendation
Install the latest Windows security updates from the vendor.
Other vulnerabilities in Windows Device Association Service
See all- CVE-2026-83940High
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-77500High
A release of invalid pointer or reference vulnerability in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69866High
A use-after-free vulnerability in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69791High
A use-after-free vulnerability in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69714High
Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69711High
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69581High
Use after free in the Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69574High
Use after free in the Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69488High
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69296High
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
Original NVD description (English source)
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.