352 matches found
CVE-2026-32156
Use after free in Windows Universal Plug and Play UPnP Device Host allows an unauthorized attacker to execute code locally...
CVE-2026-32077
Untrusted pointer dereference in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...
CVE-2026-32075
Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...
CVE-2026-32214 Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability
...
CVE-2026-32214
Technical details about CVE-2026-32214 are not provided in the given documents. No explicit affected products, vulnerable components, impact, or remediation details are disclosed here. Monitor for updates from official sources.
CVE-2026-32214
Improper access control in Universal Plug and Play upnp.dll allows an authorized attacker to disclose information locally...
CVE-2026-32214 Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability
...
CVE-2026-32077 Windows UPnP Device Host Elevation of Privilege Vulnerability
...
CVE-2026-27925 Windows UPnP Device Host Information Disclosure Vulnerability
...
CVE-2026-27925
CVE-2026-27925 concerns a use-after-free in Windows Universal Plug and Play (UPnP) Device Host that allows an adjacent-network attacker to disclose information. Affected component: Windows UPnP Device Host (upnp.dll). Impact as described: information disclosure with high confidentiality impact; n...
CVE-2026-27920 Windows UPnP Device Host Elevation of Privilege Vulnerability
...
CVE-2026-27920 Windows UPnP Device Host Elevation of Privilege Vulnerability
...
CVE-2026-27920
CVE-2026-27920 is a Windows vulnerability in the UPnP Device Host that enables a local privilege escalation . The entry indicates a local attack vector with low required privileges and no user interaction, leading to high impact on confidentiality, integrity, and availability. The CVSS 3.1 base s...
CVE-2026-27916 Windows UPnP Device Host Elevation of Privilege Vulnerability
...
CVE-2026-27916
CVE-2026-27916 describes a use-after-free in Windows Universal Plug and Play (UPnP) Device Host that could allow an authorized, local attacker to elevate privileges. The connected documents confirm this CVE is associated with the UPnP Device Host and that Microsoft has published updates to fix vu...
CVE-2026-32212 Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability
...
CVE-2026-32212 Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability
...
CVE-2026-32212
Improper link resolution before file access 'link following' in Universal Plug and Play upnp.dll allows an authorized attacker to disclose information locally...
CVE-2026-32212
CVE-2026-32212 refers to a Universal Plug and Play information disclosure in upnp.dll. The CVSSv3.1 base score is 5.5 (Medium) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and no user interaction. Impact is confined to confidentiality (HIGH) with no integrity/availabi...