44825 matches found
EUVD-2026-22459
Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...
CVE-2026-32156
Use after free in Windows Universal Plug and Play UPnP Device Host allows an unauthorized attacker to execute code locally...
CVE-2026-32077
Untrusted pointer dereference in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...
CVE-2026-32075
Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...
CVE-2026-27919
Untrusted pointer dereference in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...
CVE-2026-27920
Untrusted pointer dereference in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...
CVE-2026-27915
Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...
CVE-2026-27916
Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...
CVE-2026-5752
Sandbox Escape Vulnerability in Terrarium allows arbitrary code execution with root privileges on a host process via JavaScript prototype chain traversal...
CVE-2026-32077 Windows UPnP Device Host Elevation of Privilege Vulnerability
...
CVE-2026-32077
CVE-2026-32077 is a Windows UPnP Device Host elevation-of-privilege vulnerability. The CVSS v3.1 base score is 7.8 (HIGH) with a LOCAL attack vector, LOW attack complexity, and required LOW privileges; no user interaction is needed. Affects confidentiality, integrity, and availability (all HIGH i...
CVE-2026-32077 Windows UPnP Device Host Elevation of Privilege Vulnerability
...
CVE-2026-27925 Windows UPnP Device Host Information Disclosure Vulnerability
...
CVE-2026-27925 Windows UPnP Device Host Information Disclosure Vulnerability
...
CVE-2026-27925
CVE-2026-27925 concerns a use-after-free in Windows Universal Plug and Play (UPnP) Device Host that allows an adjacent-network attacker to disclose information. Affected component: Windows UPnP Device Host (upnp.dll). Impact as described: information disclosure with high confidentiality impact; n...
CVE-2026-27920
CVE-2026-27920 is a Windows vulnerability in the UPnP Device Host that enables a local privilege escalation . The entry indicates a local attack vector with low required privileges and no user interaction, leading to high impact on confidentiality, integrity, and availability. The CVSS 3.1 base s...
CVE-2026-27920 Windows UPnP Device Host Elevation of Privilege Vulnerability
...
CVE-2026-27920 Windows UPnP Device Host Elevation of Privilege Vulnerability
...
CVE-2026-27916
CVE-2026-27916 describes a use-after-free in Windows Universal Plug and Play (UPnP) Device Host that could allow an authorized, local attacker to elevate privileges. The connected documents confirm this CVE is associated with the UPnP Device Host and that Microsoft has published updates to fix vu...