A heap-based buffer overflow in the Windows Connected Devices Platform Service (Cdpsvc) — tracked as CVE-2025-59191 — was published on October 14, 2025 and classified by vendors as an elevation-of-privilege (EoP) vulnerability that allows an authorized local attacker with low privileges to gain...
A use-after-free memory‑corruption flaw in the Windows Connected Devices Platform Service (CDPSvc) has been publicly recorded as an elevation‑of‑privilege vulnerability that can allow a local, authorized attacker to gain SYSTEM privileges on affected hosts — administrators must treat CDPSvc...
A newly reported vulnerability tied to the Windows Connected Devices Platform Service (Cdpsvc) has raised alarms for administrators and defenders: while public trackers and community analyses describe memory‑corruption defects in CDPSvc that can lead to privilege escalation or execution under...