CVE-2026-69693
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally.
Risk Assessment
A local attacker could exploit this vulnerability to escalate privileges and take control of the system.
Recommendation
Apply the latest Windows security updates.
Other vulnerabilities in Windows Device Association Broker
See all- CVE-2025-55677High
An untrusted pointer dereference in the Windows Device Association Broker service allows an authorized attacker to elevate privileges locally. The flaw occurs while the service processes input data.
- CVE-2025-50174High
A use-after-free vulnerability exists in the Windows Device Association Broker service. It allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS