Microsoft UPnP Device Host Remote Code Execution Vulnerability

A use-after-free vulnerability has been identified in the Universal Plug and Play (UPnP) component of Windows, specifically within the 'upnp.dll' file. This vulnerability allows an unauthorized attacker to execute code remotely over the network. The issue arises from improper memory management, where the UPnP service incorrectly frees memory, potentially leading to arbitrary code execution in the context of the affected process.

Impact

Exploitation of this vulnerability could result in remote code execution on the affected system.

Remediation

Users can apply the official security update provided by Microsoft to address this vulnerability. For guidance on downloading and installing the update, refer to the Microsoft Security Update Guide.