EUVD-2026-73541
GHSA-p8q8-83qr-vr3j
Severity by source
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Local race-condition UAF requiring low privileges and timing success; full system impact but no scope change or network vector.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
5DescriptionCVE.org
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
AnalysisAI
Local privilege escalation in Windows Device Association Service exposes all supported Windows client and server editions to full system compromise by a low-privileged local attacker. The root cause is a use-after-free triggered through a race condition (CWE-362): concurrent access to a shared resource in the Device Association Service allows a freed memory object to be reused, enabling controlled code execution in a higher-privilege context. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a local authenticated session with at least standard (low-privilege) user rights on the target system - PR:L in the CVSS vector confirms this. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | CVSS base score of 7.0 with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H is consistent with the described attack: maximum confidentiality, integrity, and availability impact attainable by a low-privileged local user, offset by high attack complexity (the race window must be reliably won). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Microsoft security updates available through Windows Update, WSUS, or Microsoft Update Catalog as documented in the MSRC advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69581. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory Windows 10, 11, and Server systems (2012 R2-2025) across your environment and confirm patch availability from Microsoft. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-362 – Race Condition
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today