CVE-2026-32156

Use after free in Windows Universal Plug and Play UPnP Device Host allows an unauthorized attacker to execute code locally...

CVE-2026-32156

CVE-2026-32156 is a use-after-free vulnerability in the Windows Universal Plug and Play (UPnP) Device Host (upnp.dll) that allows a local, unauthorized attacker to execute code on the system. The connected sources confirm the issue affects Windows UPnP Device Host and list it among UPnP-related C...

CVE-2026-32156 Windows UPnP Device Host Remote Code Execution Vulnerability

...

CVE-2026-32156

creationtimestamp| type| source ---|---|--- 2026-04-14 15:49:19+00:00| seen| https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review 2026-04-14 18:22:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116404450410856336 2026-04-14 20:13:06+00:00| seen|...