3 reportsPriority Low
Windows Connected User Experiences and Telemetry vulnerabilities
Multiple vulnerabilities in Windows Connected User Experiences and Telemetry could allow attackers to gain elevated privileges or access sensitive information.
First report Latest
What is going on
- A vulnerability in Windows Connected User Experiences and Telemetry allows an authorised attacker to elevate privileges locally through a use after free issue.
- Another vulnerability in the same component enables an authorised attacker to disclose information locally via accessible files or directories.
- A separate use after free vulnerability in the Connected Devices Platform Service has a low estimated chance of being exploited within 30 days according to a probability signal.
Reports in this story
Newest first. Each one is a separate event with its own sources and evidence.
- Priority LowType VulnerabilityLead report
Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally
- Priority LowType Vulnerability
Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability
- Priority LowType Vulnerability
Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

