Microsoft Windows UPnP Device Host Use-After-Free Vulnerability Allowing Local Code Execution
Vulnerability
A use-after-free vulnerability has been identified in the Windows Universal Plug and Play (UPnP) Device Host. This vulnerability allows an unauthorized attacker to execute code locally on the affected system.
Impact
Exploitation of this vulnerability could lead to unauthorized local code execution.
Remediation
Users can apply the security update provided by Microsoft to address this vulnerability. This security update is available through the Microsoft Update Catalog.
Added: Apr 14, 2026, 8:43 PM
Updated: Apr 14, 2026, 8:43 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
7.5exploitability
2.7remediation
0.0relevance
5.9threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.