Microsoft Windows UPnP Device Host Use-After-Free Information Disclosure Vulnerability

A use-after-free vulnerability has been identified in the Windows Universal Plug and Play (UPnP) Device Host. This vulnerability allows an unauthorized attacker to disclose information over an adjacent network. The issue arises from improper memory management, which could potentially be exploited to access unauthorized file system data.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure, specifically allowing access to restricted file system data.

Remediation

Users can apply the security update for this vulnerability, which is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5082200, KB5082052, KB5082142, KB5082123, KB5082063, and KB5082198.