Microsoft has assigned CVE-2025-55677 to a newly disclosed elevation-of-privilege vulnerability in the Windows Device Association Broker Service: the vendor describes the root cause as an untrusted pointer dereference that lets an authorized local user escalate privileges, and Microsoft has...