A use-after-free vulnerability in the Microsoft Windows Connected Devices Platform Service permits local attackers to elevate privileges, posing a significant risk to system integrity.

This vulnerability is a use-after-free flaw (CWE-416) within the Connected Devices Platform Service (Cdpsvc). An attacker with low-level local access can leverage this defect to execute code with elevated system privileges.

The ability for a standard user to escalate privileges to the system level represents a critical security failure, as it bypasses standard access control mechanisms. Successful exploitation could lead to full system compromise, allowing attackers to install malicious software, modify sensitive data, or disable security tools. With a CVSS score of 7.8, this vulnerability is categorized as High, reflecting the severe impact on confidentiality, integrity, and availability.

Immediate Action: Apply the relevant Microsoft security updates for the affected Windows versions as documented in the Microsoft Security Update Guide.

Proactive Monitoring: Monitor system logs for unusual process creation or service crashes involving Cdpsvc.exe, which may indicate exploitation attempts.

Compensating Controls: Ensure that local user permissions follow the principle of least privilege to minimize the potential impact of local account compromise.

Public Exploit Available: No confirmed public exploit exists.

Given the potential for local privilege escalation, organizations should prioritize patching affected Windows systems as part of their regular update cycle. System administrators should verify that all machines are updated to the versions specified in the vendor advisory to eliminate this vulnerability entirely.