Microsoft Windows UPnP Remote Code Execution Vulnerability

A use-after-free vulnerability has been identified in the Universal Plug and Play (UPnP) component of Windows, specifically within the upnp.dll file. This vulnerability allows an unauthorized attacker to execute code remotely over a network. It affects multiple Windows versions, including various server and client editions. The vulnerability arises from improper handling of memory, which could be exploited by sending specially crafted data that causes the UPnP service to free memory incorrectly, potentially leading to arbitrary code execution.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Users can apply the security update provided by Microsoft to address this vulnerability. This security update is included in the Monthly Rollup for various Windows versions. Instructions for downloading the security update can be found in the Microsoft Update Catalog.