CVE-2026-77500
HighCVSS 7.8Summary
A release of invalid pointer or reference vulnerability in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized attacker could gain elevated privileges on the system, potentially leading to full device compromise.
Recommendation
Install available security updates and restrict system access to trusted users only.
Other vulnerabilities in Windows Device Association Service
See all- CVE-2026-83940High
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69866High
A use-after-free vulnerability in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69791High
A use-after-free vulnerability in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69714High
Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69711High
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69581High
Use after free in the Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69574High
Use after free in the Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69488High
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69478High
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69296High
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
Original NVD description (English source)
Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally.