Product:
Windows Universal Plug and Play Device Host
Summary
Use after free in Windows Universal Plug and Play Device Host allows an authorized attacker to elevate privileges locally. This vulnerability can lead to significant security risks if exploited. It is crucial for users to be aware of this issue to protect their systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2026-27915 |
Exploitation
An attacker with local access can exploit this vulnerability by manipulating the memory management of the Windows Universal Plug and Play Device Host. By triggering a use after free condition, the attacker can gain elevated privileges on the affected system, allowing them to execute arbitrary code or perform unauthorized actions.
Affected Products
- Windows Universal Plug and Play Device Host: Vulnerable to privilege escalation due to memory management issues.
Mitigation
To mitigate this vulnerability, users should ensure that their systems are updated with the latest security patches from Microsoft. Regularly applying updates and monitoring for security advisories can help protect against potential exploitation.