CVE-2026-69714
HighCVSS 8.0Summary
Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
Risk Assessment
Risk of remote privilege escalation in Windows, potentially allowing the attacker to gain control over devices and data.
Recommendation
Install Windows security updates and restrict access to the Device Association Service.
Other vulnerabilities in Windows Device Association Service
See all- CVE-2026-83940High
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-77500High
A release of invalid pointer or reference vulnerability in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69866High
A use-after-free vulnerability in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69791High
A use-after-free vulnerability in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69711High
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69581High
Use after free in the Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69574High
Use after free in the Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69488High
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69478High
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69296High
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
Original NVD description (English source)
Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.