Microsoft Windows SSDP race condition vulnerability

Microsoft Windows SSDP is a simple service discovery provider developed by Microsoft Corporation. The Microsoft Windows SSDP Service has a vulnerability related to race conditions. Attackers can exploit this vulnerability to gain elevated privileges. The following products and versions are...

CVE-2025-47975 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

...

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

Use after free in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Windows SSDP Service allows an authorized attacker to elevate privileges locally...