CVE-2025-47976

Use after free in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

CVE-2025-48815

CVE-2025-48815 affects Windows OS via a type confusion in the SSDP Service that could allow an authorized local attacker to elevate privileges. The description states local privilege escalation with high impact (CVSSv3.1: 7.8, HIGH). No explicit exploitation details or vendor/product versions are...

CVE-2025-48815 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

...

CVE-2025-48815 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

...

CVE-2025-47975

Technical details about CVE-2025-47975 are not publicly provided in the connected documents. The available sources do not describe affected products/versions, root cause specifics, impact beyond the general privilege escalation claim, or fixes. Monitor for updates.

CVE-2025-47975 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

...

CVE-2025-47975 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

...

CVE-2025-47976

Technical details beyond the high-level description are not provided in the supplied documents. No affected product versions, exploit details, or remediation are stated here. Monitor for updates from official advisories.

CVE-2025-47976 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

...

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

Double free in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

Use after free in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

CVE-2025-47975: Double Free

Double free in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

CVE-2025-47976: Use After Free

Use after free in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

CVE-2025-48815: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

PT-2025-28546

Name of the Vulnerable Software and Affected Versions: Windows SSDP Service affected versions not specified Description: The issue is related to a 'type confusion' problem in the Windows SSDP Service, allowing an authorized attacker to elevate privileges locally. There is no information provided...

PT-2025-28512 · Microsoft · Windows Ssdp Service +1

Name of the Vulnerable Software and Affected Versions: Windows SSDP Service affected versions not specified Description: The issue concerns a double free in the Windows SSDP Service, which allows an authorized attacker to elevate privileges locally. This means an attacker with certain permissions...

PT-2025-28513 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a use after free condition in the Windows SSDP Service, which allows an authorized attacker to elevate privileges locally. This means an attacker with certain...

PT-2025-28663 · D Link · D-Link Dir-645

Name of the Vulnerable Software and Affected Versions: D-Link DIR-645 versions 1.05B01 and earlier Description: A critical issue affects the ssdpcgi main function of the ssdpcgi component, located in the /htdocs/cgibin file. This problem leads to command injection and can be exploited remotely. T...

CVE-2021-29379

An issue was discovered on D-Link DIR-802 A1 devices through 1.00b05. Universal Plug and Play UPnP is enabled by default on port 1900. An attacker can perform command injection by injecting a payload into the Search Target ST field of the SSDP M-SEARCH discover packet. NOTE: This vulnerability on...