CVE-2025-58719CWE-416

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

Medium · published October 14, 2025

CVSS v3.1
4.7
EPSS
0%
Percentile
32.6
In the wild
Unconfirmed
What it is

Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00396 · 32.6th percentile
Weakness
CWE-416 · Use After Free
Published
2025-10-14T17:00Z
EPSS history
Timeline
  • 14 OCT 17:00Z
    Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
    cvelistv5