CVE-2026-32077 Windows UPnP Device Host Elevation of Privilege Vulnerability

...

CVE-2026-32077 Windows UPnP Device Host Elevation of Privilege Vulnerability

...

CVE-2026-27925 Windows UPnP Device Host Information Disclosure Vulnerability

...

CVE-2026-27925 Windows UPnP Device Host Information Disclosure Vulnerability

...

CVE-2026-27925

CVE-2026-27925 concerns a use-after-free in Windows Universal Plug and Play (UPnP) Device Host that allows an adjacent-network attacker to disclose information. Affected component: Windows UPnP Device Host (upnp.dll). Impact as described: information disclosure with high confidentiality impact; n...

CVE-2026-27920 Windows UPnP Device Host Elevation of Privilege Vulnerability

...

CVE-2026-27920 Windows UPnP Device Host Elevation of Privilege Vulnerability

...

CVE-2026-27920

CVE-2026-27920 is a Windows vulnerability in the UPnP Device Host that enables a local privilege escalation . The entry indicates a local attack vector with low required privileges and no user interaction, leading to high impact on confidentiality, integrity, and availability. The CVSS 3.1 base s...

CVE-2026-27916 Windows UPnP Device Host Elevation of Privilege Vulnerability

...

CVE-2026-27916 Windows UPnP Device Host Elevation of Privilege Vulnerability

...

CVE-2026-27916

CVE-2026-27916 describes a use-after-free in Windows Universal Plug and Play (UPnP) Device Host that could allow an authorized, local attacker to elevate privileges. The connected documents confirm this CVE is associated with the UPnP Device Host and that Microsoft has published updates to fix vu...

CVE-2026-32212 Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability

...

CVE-2026-32212

CVE-2026-32212 refers to a Universal Plug and Play information disclosure in upnp.dll. The CVSSv3.1 base score is 5.5 (Medium) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and no user interaction. Impact is confined to confidentiality (HIGH) with no integrity/availabi...

CVE-2026-32156 Windows UPnP Device Host Remote Code Execution Vulnerability

...

CVE-2026-32156 Windows UPnP Device Host Remote Code Execution Vulnerability

...

CVE-2026-32156

CVE-2026-32156 is a use-after-free vulnerability in the Windows Universal Plug and Play (UPnP) Device Host (upnp.dll) that allows a local, unauthorized attacker to execute code on the system. The connected sources confirm the issue affects Windows UPnP Device Host and list it among UPnP-related C...

CVE-2026-32075

CVE-2026-32075 affects Windows that uses the UPnP Device Host; vulnerability is Elevation of Privilege via a local vector. Requires LOW privileges and no user interaction, with high impact on confidentiality, integrity, and availability. Exploit code maturity is UNPROVEN; remediation is an offici...

CVE-2026-32075 Windows UPnP Device Host Elevation of Privilege Vulnerability

...

CVE-2026-27919 Windows UPnP Device Host Elevation of Privilege Vulnerability

...

CVE-2026-27919 Windows UPnP Device Host Elevation of Privilege Vulnerability

...