Product:
Universal Plug and Play
Summary
Improper link resolution before file access in Universal Plug and Play allows an authorized attacker to disclose information locally. This vulnerability can lead to unauthorized access to sensitive information. It is classified as having a medium severity level due to its potential impact on confidentiality.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-32212 |
Exploitation
To exploit this vulnerability, an attacker with local access can manipulate link resolution processes to gain unauthorized access to sensitive information. This requires low privileges and does not necessitate user interaction, making it easier for an attacker to execute the exploit in a local environment.
Affected Products
- Universal Plug and Play: Vulnerable to improper link resolution, allowing local information disclosure.
Mitigation
To mitigate this vulnerability, users should ensure that their systems are updated with the latest security patches from Microsoft. Regularly reviewing and applying security updates can help protect against potential exploitation of this and similar vulnerabilities.