cve 2026 62747

This tag covers CVE-2026-62747, a high-severity local elevation-of-privilege vulnerability in the Windows Device Association Service. Microsoft addressed the flaw in the August 11, 2026 security release, and administrators are advised to apply the cumulative update on affected Windows clients and servers. The vulnerability is a heap-based buffer overflow (CWE-122) with a CVSS 3.1 score of 7.8, featuring a local attack vector, low complexity, low privileges required, and no user interaction. Discussions emphasize verifying the installed OS build after patching to ensure the exposure is closed, rather than relying solely on update scans.