October 26, 2026

CyberWorldOps Cyber Security · Threat Intelligence · CVE

CVE-2026-69516

High7.0 Published on Sep 8, 2026

Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

CVSS score7.0 / 10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-416

Vendorsmicrosoft

Affected products

Vendors	Product	Versions
microsoft	windows 10 1809	< 10.0.17763.9245
microsoft	windows 10 21h2	< 10.0.19044.7725
microsoft	windows 10 22h2	< 10.0.19045.7725
microsoft	windows 11 23h2	< 10.0.22631.7582
microsoft	windows 11 24h2	< 10.0.26100.9445
microsoft	windows 11 25h2	< 10.0.26200.9445
microsoft	windows 11 26h1	< 10.0.28000.2954
microsoft	windows server 2019	< 10.0.17763.9245
microsoft	windows server 2022	< 10.0.20348.5622
microsoft	windows server 2025	< 10.0.26100.33438

Related articles

Microsoft Patches 966 Flaws as Two Windows Zero-Days Come Under Active Attack

Vulnerabilities

Microsoft Patches 966 Flaws as Two Windows Zero-Days Come Under Active Attack

Microsoft fixed 966 flaws in record September Patch Tuesday, including two exploited Windows privilege-escalation zero-days leading to SYSTEM access.

Sep 8, 202621:34 6 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.