Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
Windows UPnP Device Host Privilege Elevation Vulnerability
CVE-2026-32077
Summary
A vulnerability in Windows Universal Plug and Play (UPnP) Device Host could allow an authorized user to gain higher-level access to a computer. This could potentially allow the attacker to perform actions they shouldn't be able to, such as accessing sensitive data or making changes to system settings. To protect your system, ensure that UPnP is disabled on your network and keep your Windows operating system up to date with the latest security patches.
Original title
Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
Original description
Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
nvd CVSS3.1
7.8
Vulnerability type
CWE-822
Published: 14 Apr 2026 · Updated: 14 Apr 2026 · First seen: 14 Apr 2026