CVE-2026-27920 lands in familiar territory for Windows defenders: a local elevation-of-privilege flaw in the Windows UPnP Device Host service, with Microsoft’s April 14, 2026 update closing the hole across a wide range of client and server builds. Early technical summaries describe the issue as...