EUVD-2026-73217
GHSA-7gq6-45m7-rw9q
Severity by source
AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Network-delivered UAF privilege escalation; AC:H reflects heap-grooming/race complexity; PR:L and UI:R match documented authorized-attacker and user-interaction requirements; full CIA impact on successful exploitation of an EoP flaw.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
4DescriptionCVE.org
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
AnalysisAI
Use after free in the Windows Device Association Service enables network-based privilege escalation by low-privilege authenticated attackers across Windows 10, Windows 11, and Windows Server 2012 through 2025. The CVSS 3.1 score of 7.1 accurately reflects meaningful exploitation constraints - high attack complexity, required user interaction, and prior authentication - despite the maximal CIA impact if exploitation succeeds. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to hold a valid low-privilege Windows account (PR:L) - unauthenticated remote exploitation is not supported by the CVSS vector. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector (AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H, score 7.1) captures a meaningful gap between theoretical and practical exploitability: while the impact triad is maximal, the attacker must already hold a low-privilege account, achieve a complex timing or heap-state condition characteristic of UAF exploitation, and induce user interaction - a trifecta of prerequisites that substantially narrows the realistic threat actor pool. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | The primary fix is to apply Microsoft's security update that brings each affected Windows build to or above the patched version for that product line - for example, Windows 10 22H2 to 10.0.19045.7725 or later, Windows 11 24H2 to 10.0.26100.9445 or later, and Windows Server 2025 to 10.0.26100.33438 or later. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Windows 10, Windows 11, and Windows Server 2012-2025 systems and identify those with active low-privilege user accounts (service accounts, standard desktop users, temporary staff). …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-416 – Use After Free
View allSame technique Use After Free
View allShare
External POC / Exploit Code
Leaving vuln.today