EUVD-2026-73003
GHSA-q8qf-w68x-j8mx
Severity by source
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Local access and low-privilege account required; high complexity reflects UAF race-condition exploitation; full CIA impact upon successful SYSTEM-level privilege escalation.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
4DescriptionCVE.org
Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
AnalysisAI
Local privilege escalation in the Windows Connected Devices Platform Service (Cdpsvc) via a use-after-free condition allows an authorized local attacker with standard user privileges to achieve full system compromise (C:H/I:H/A:H). The vulnerability affects a broad range of Windows 10, Windows 11, and Windows Server builds, with Microsoft-confirmed patch availability across all listed versions. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an existing local authenticated session with at minimum standard (low-privilege) user rights - PR:L per CVSS. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.0 score reflects a meaningful but conditional risk: the AV:L requirement restricts exploitation to attackers who already have a foothold on the target system, and AC:H signals that reliable exploitation requires either precise timing, heap grooming, or specific service state conditions. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the vendor-released security updates via Windows Update or WSUS, targeting the per-version fixed builds listed under Affected Products: for Windows 10 1809 and Server 2019 targets, update to build 10.0.17763.9245 or later; for Windows 10 21H2, to 10.0.19044.7725 or later; for 22H2, to 10.0.19045.7725; for Server 2022, to 10.0.20348.5622; for Windows 11 23H2, to 10.0.22631.7582; for Windows 11 24H2/25H2 and Server 2025, to 10.0.26100.9445 (client) or 10.0.26100.33438 (server). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Windows 10, Windows 11, and Windows Server systems and verify patch deployment status through your asset management tools. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-416 – Use After Free
View allSame technique Use After Free
View allShare
External POC / Exploit Code
Leaving vuln.today