CVE-2026-69488
HighCVSS 7.0Summary
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could exploit the flaw to execute code in system context, potentially leading to full system compromise.
Recommendation
Install the latest Windows security updates from the vendor.
Other vulnerabilities in Windows Device Association Service
See all- CVE-2026-83940High
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-77500High
A release of invalid pointer or reference vulnerability in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69866High
A use-after-free vulnerability in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69791High
A use-after-free vulnerability in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69714High
Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69711High
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69581High
Use after free in the Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69574High
Use after free in the Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69478High
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69296High
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
Original NVD description (English source)
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.