Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
microsoft·CWE-763·Published 2026-09-08