> CVE-2026-20864 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

[SOURCE] Microsoft Security Update Guide [DATE: 13/01/2026 08:00] [LANGUAGE: EN]

Heap-based buffer overflow in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.