POC-CVE-2017-8464-OpenCalculator

CVE-2017-8464 / research + PoC Create 1 Shortcut + 1 .DLL containing malicious payload = Put it on a USB and send to victim = victim opens USB = Payload automatically triggers ! ROOT CAUSE 1. First, we need to know exactly where this bug comes from! It's because of a feature called Plug-and-Play ...

CVE-2026-110655

A flaw was found in miniupnpc. An out-of-bounds read vulnerability in the XML attribute parser can lead to a Denial of Service DoS by crashing the client application. A network-adjacent attacker operating a rogue Universal Plug and Play UPnP gateway can exploit this by sending specially crafted...

Astra Linux – vulnerability in wpa, pupnp-1.8

The Open Connectivity Foundation UPnP specification prior to 2020-04-17 does not prohibit accepting a subscription request containing a delivery URL located on a network segment different from the fully qualified event-subscription URL; this is known as the CallStranger issue...

CVE-2026-85927

Heap-based buffer overflow in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

CVE-2026-85918

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

CVE-2026-85373

Heap-based buffer overflow in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

CVE-2026-85375

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

EUVD-2026-99579

Heap-based buffer overflow in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

CVE-2026-85927

A heap-based buffer overflow exists in the Windows Universal Plug and Play (UPnP) Device Host . This vulnerability allows an authorized attacker to achieve local privilege escalation . While the documents confirm the existence of the flaw and its impact on local security, specific details regardi...

EUVD-2026-99577

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

CVE-2026-85918

A Use after free vulnerability exists in the Windows Universal Plug and Play (UPnP) Device Host . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is confirmed with a high severity base score of 7.0. No specific exploit information or remediation de...

EUVD-2026-99497

Heap-based buffer overflow in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

EUVD-2026-99499

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

CVE-2026-85375

A Use after free vulnerability exists in the Windows Universal Plug and Play (UPnP) Device Host component. This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or technical root cause analysis beyond the vulnerability type are provided in the...

CVE-2026-85373

A heap-based buffer overflow exists in the Windows Universal Plug and Play (UPnP) Device Host . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific version numbers, root causes, or remediation steps are provided in the documents beyond the general ...

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

PT-2026-112753

Name of the Vulnerable Software and Affected Versions Windows Universal Plug and Play UPnP Device Host affected versions not specified Description A heap-based buffer overflow occurs in the Windows Universal Plug and Play UPnP Device Host. This issue allows an authorized attacker to elevate...