CVE-2026-20864 Details

A heap-based buffer overflow vulnerability has been identified in the Connected Devices Platform Service (Cdpsvc) on Microsoft Windows. This vulnerability allows an authorized attacker to elevate privileges locally, potentially gaining SYSTEM privileges. The issue arises from a heap-based buffer overflow, which can be exploited to manipulate memory and execute arbitrary code with elevated rights.

Users can apply the security update provided by Microsoft to address this vulnerability. This security update is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5073379, KB5074109, KB5073450, KB5073724, and KB5073723.