Windows Device Association Service vulnerabilities
24 known CVE vulnerabilities in Windows Device Association Service, translated and rated.
- CVE-2026-96854Medium
Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.
- CVE-2026-85904High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-85815Medium
An out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
- CVE-2026-85352High
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-85342High
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-85336Medium
An out-of-bounds read vulnerability in Windows Device Association Service allows an authorized attacker to disclose information locally. The issue involves improper reading beyond buffer boundaries.
- CVE-2026-85332High
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-85331Medium
An out-of-bounds read vulnerability in Windows Device Association Service allows an authorized attacker to disclose information over a network. The issue involves improper reading beyond buffer boundaries.
- CVE-2026-84014High
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83710High
A use after free vulnerability in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-70227Medium
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
- CVE-2026-83940High
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-77500High
A release of invalid pointer or reference vulnerability in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69866High
A use-after-free vulnerability in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69791High
A use-after-free vulnerability in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69714High
Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69711High
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69581High
Use after free in the Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69574High
Use after free in the Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69488High
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69478High
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69296High
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
- CVE-2026-62747High
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-62710High
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

