---
id: "CVE-2026-112743"
page: "https://infrastack.ai/live/CVE-2026-112743"
kind: "vulnerability"
aliases: ["CVE-2026-112743"]
title: "Windows Device Association Service: local user can gain elevated privileges"
severity: "high"
cvss: 7.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "windows"]
not_affected_if: ["no-untrusted-local-users"]
published_at: "2026-11-10T19:18:34+00:00"
first_seen_at: "2026-11-10T19:24:31+00:00"
updated_at: "2026-11-10T19:42:19+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112743", "first_seen_at": "2026-11-10T19:24:31+00:00"}]
exploit_sources: []
---

# Windows Device Association Service: local user can gain elevated privileges

Link for people: https://infrastack.ai/live/CVE-2026-112743 (this .md is for agents)

A flaw in the Windows Device Association Service lets an authorized local attacker dereference an untrusted pointer and raise their privileges. The attacker must already be able to run code or log on to the machine.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:24:31+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-112743

## From the sources

Untrusted pointer dereference in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_