7539 matches found
CVE-2026-27916
CVE-2026-27916 describes a use-after-free in Windows Universal Plug and Play (UPnP) Device Host that could allow an authorized, local attacker to elevate privileges. The connected documents confirm this CVE is associated with the UPnP Device Host and that Microsoft has published updates to fix vu...
CVE-2026-27916 Windows UPnP Device Host Elevation of Privilege Vulnerability
...
CVE-2026-32212 Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability
...
CVE-2026-32212
CVE-2026-32212 refers to a Universal Plug and Play information disclosure in upnp.dll. The CVSSv3.1 base score is 5.5 (Medium) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and no user interaction. Impact is confined to confidentiality (HIGH) with no integrity/availabi...
CVE-2026-32212 Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability
...
CVE-2026-32212
Improper link resolution before file access 'link following' in Universal Plug and Play upnp.dll allows an authorized attacker to disclose information locally...
CVE-2026-32156 Windows UPnP Device Host Remote Code Execution Vulnerability
...
CVE-2026-32156 Windows UPnP Device Host Remote Code Execution Vulnerability
...
CVE-2026-32075 Windows UPnP Device Host Elevation of Privilege Vulnerability
...
CVE-2026-27919 Windows UPnP Device Host Elevation of Privilege Vulnerability
...
CVE-2026-27915 Windows UPnP Device Host Elevation of Privilege Vulnerability
...
CVE-2026-27915
CVE-2026-27915 affects Windows UPnP Device Host. It enables local privilege escalation with a low attack complexity and no user interaction, requiring limited privileges and resulting in high confidentiality, integrity, and availability impact. The CVSSv3.1 base score is 7.8 ( HIGH ), with exploi...
CVE-2026-27915 Windows UPnP Device Host Elevation of Privilege Vulnerability
...
Windows UPnP Device Host Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...
Windows USB Printing Stack (usbprint.sys) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack...
Windows UPnP Device Host Remote Code Execution Vulnerability
Use after free in Windows Universal Plug and Play UPnP Device Host allows an unauthorized attacker to execute code locally...
Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability
Improper access control in Universal Plug and Play upnp.dll allows an authorized attacker to disclose information locally...
Windows UPnP Device Host Information Disclosure Vulnerability
Use after free in Windows Universal Plug and Play UPnP Device Host allows an unauthorized attacker to disclose information over an adjacent network...