Zhang Wang

**Name of the Vulnerable Software and Affected Versions** Windows WalletService (affected versions not specified) **Description** A use after free issue in Windows WalletService allows an authorized attacker to elevate privileges locally. Use after free is a condition where a program continues to use a pointer after it has been freed, which can lead to memory corruption. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Connected Devices Platform Service (affected versions not specified) **Description** A flaw exists in the Windows Connected Devices Platform Service that allows a local attacker to gain elevated privileges. This occurs due to a race condition during concurrent execution using a shared resource with improper synchronization. The issue allows an authorized attacker to elevate privileges locally. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows versions prior to 2026-20853 **Description** A race condition exists in Windows WalletService due to concurrent execution using a shared resource with improper synchronization. This allows an unauthorized attacker to elevate privileges locally. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Connected Devices Platform Service (Cdpsvc) (affected versions not specified) **Description** A heap-based buffer overflow exists in the Connected Devices Platform Service (Cdpsvc). This condition allows a locally authenticated attacker to gain elevated privileges on the system. The issue allows attackers to affect the system, potentially leading to privilege escalation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows (affected versions not specified) Description: An elevation-of-privilege issue allows attackers to affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows 10 x64 1909 (OS Build 18363.719) Windows 10 version 10.0.18362.719 (WinBuild.160101.0800) **Description** The issue is related to errors in processing objects in memory in the Win32k component of the Windows operating system. This can allow an attacker to elevate their privileges. An elevation-of-privilege vulnerability exists, allowing attackers to affect the system. **Recommendations** For Windows 10 x64 1909 (OS Build 18363.719), update to a version that includes the fix for this issue. For Windows 10 version 10.0.18362.719 (WinBuild.160101.0800), update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the Win32k component until a patch is available.