The Windows Universal Plug and Play (UPnP) Device Host has been identified with a critical vulnerability, designated as CVE-2025-48819. This flaw allows an authorized attacker to elevate their privileges over an adjacent network by exploiting sensitive data stored in improperly locked memory...
If you've ever wondered how seemingly small elements in your Windows operating system can cause widespread disruptions, CVE-2025-21300 is here to bring that notion to life. This newly disclosed vulnerability involves the upnphost.dll module on Windows and has been identified as a Denial of...