Executive brief
The Windows Device Association Service is a system component that manages device pairing and connectivity. A stack-based buffer overflow vulnerability allows an authorized user to execute arbitrary code with elevated privileges on the affected system, potentially leading to complete system compromise and unauthorized access to sensitive data.
Technical details
A stack-based buffer overflow vulnerability exists in the Windows Device Association Service that can be triggered by an authenticated local or network-based attacker. The vulnerability results from insufficient input validation in a network-accessible component, allowing an attacker to overflow a stack buffer and overwrite the return address. An attacker with valid credentials can send a specially crafted network request to trigger the overflow and execute arbitrary code with SYSTEM privileges. Microsoft has issued security updates to address this vulnerability.
Affected products
- Microsoft Windows <UNKNOWN>
Timeline
- 2026-09-08: disclosed