Product:
Windows Universal Plug and Play (UPnP) Device Host
Summary
Use after free in Windows Universal Plug and Play Device Host allows an unauthorized attacker to disclose information over an adjacent network. This vulnerability can lead to significant confidentiality impacts, making sensitive information accessible to attackers. It is classified as having a medium severity level.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2026-27925 |
Exploitation
To exploit this vulnerability, an attacker must be on the same adjacent network as the vulnerable device. By sending specially crafted requests to the UPnP service, the attacker can trigger the use after free condition, potentially leading to the disclosure of sensitive information. This requires no special privileges or user interaction, making it easier for attackers to exploit.
Affected Products
- Windows Universal Plug and Play Device Host: Vulnerable to information disclosure due to a use after free condition.
Mitigation
To mitigate this vulnerability, users should ensure that their systems are updated with the latest security patches from Microsoft. Additionally, restricting access to UPnP services and monitoring network traffic can help reduce the risk of exploitation.