MEDIUM 5.5 NVD

CVE-2026-96854

Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locall

Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96854

Published: 2026-10-13 · Source: NVD · Feed updated: 2026-10-13

This medium severity vulnerability with a CVSS score of 5.5 was published on 2026-10-13 via NVD.

vulnfeed aggregates 14602 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.