upnp device host

Microsoft disclosed CVE-2026-45635 on June 9, 2026 as an Important-rated Windows UPnP Device Host remote code execution vulnerability affecting the Universal Plug and Play stack, with public listings placing it in the June 2026 Patch Tuesday batch and assigning it a high CVSS score of 8.1. The...

Microsoft disclosed CVE-2026-45599 on June 9, 2026, as a high-severity Windows UPnP Device Host remote code execution vulnerability in Universal Plug and Play’s upnp.dll, with an 8.1 CVSS score and patches released through the June Patch Tuesday security updates. The bug is not the loudest item...

Microsoft’s CVE-2026-27925 entry is another reminder that the most important Windows security advisories are not always the ones with dramatic exploit stories. Even when public technical detail is thin, the fact that Microsoft has classified this as a Windows UPnP Device Host Information...

CVE-2026-27920 lands in familiar territory for Windows defenders: a local elevation-of-privilege flaw in the Windows UPnP Device Host service, with Microsoft’s April 14, 2026 update closing the hole across a wide range of client and server builds. Early technical summaries describe the issue as...

Microsoft’s April 14, 2026 Patch Tuesday brought a new local privilege escalation flaw into focus: CVE-2026-27916, a Windows UPnP Device Host vulnerability that Microsoft rates as an elevation-of-privilege issue. The public description points to a use-after-free condition, a classic...

Microsoft’s CVE-2026-32156 entry is another reminder that metadata matters in Windows security, especially when Microsoft is talking about a Windows UPnP Device Host Remote Code Execution Vulnerability and attaching a confidence signal to the advisory. In Microsoft’s own framework, that metric...

Microsoft’s handling of CVE-2026-32075 is a reminder that, in Windows security, metadata can be as important as exploit detail. The vulnerability is identified as a Windows UPnP Device Host Elevation of Privilege Vulnerability, and the MSRC confidence metric is specifically designed to indicate...

Microsoft’s public tracking for CVE-2026-27919 places it squarely in the familiar but still dangerous category of Windows UPnP Device Host elevation-of-privilege flaws. The key story is not just that Microsoft has assigned a CVE, but that the advisory’s own confidence metric tells defenders how...