EUVD-2026-73456

Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to disclose information locally...

CVE-2026-68830

CVE-2026-68830 is an information disclosure vulnerability in Windows Universal Plug and Play (UPnP) Device Host , caused by improper link resolution before file access ('link following'). An authorized local attacker (low privileges, no user interaction) can exploit this to disclose information, ...

CVE-2026-45599 Windows UPnP Device Host Remote Code Execution Vulnerability

...

CVE-2026-32156

Use after free in Windows Universal Plug and Play UPnP Device Host allows an unauthorized attacker to execute code locally...

PT-2026-32801

Name of the Vulnerable Software and Affected Versions Windows Universal Plug and Play UPnP Device Host affected versions not specified Description A use after free issue in the Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally. Use after...

EUVD-2020-2270

Malware in sbrugna...

EUVD-2020-12468

Malware in sbrugna...

EUVD-2020-12393

Malware in sbrugna...

EUVD-2020-12412

Malware in sbrugna...

EUVD-2020-2268

Malware in sbrugna...

EUVD-2020-12306

Malware in sbrugna...

EUVD-2025-20588

Malicious code in bioql PyPI...

EUVD-2025-10166

Malicious code in bioql PyPI...

CVE-2025-48819

Sensitive data storage in improperly locked memory in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges over an adjacent network...

CVE-2025-48821

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges over an adjacent network...

CVE-2025-48821

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges over an adjacent network...

CVE-2025-48821

Technical details about CVE-2025-48821 are not provided in the supplied documents. No specific affected products, exploit information, or mitigation are described here; monitor for official updates and published fixes.

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

Sensitive data storage in improperly locked memory in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges over an adjacent network...

CVE-2020-1430

An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows UPnP Device Host Elevation of Privilege Vulnerability'. This CVE ID is unique...

CVE-2020-1354

An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows UPnP Device Host Elevation of Privilege Vulnerability'. This CVE ID is unique...