GHSA-pp9c-r6jh-wg6j

GHSA-pp9c-r6jh-wg6j PUBLISHED CVSS 6.5 MEDIUM

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to disclose information over an adjacent network.

Risk Scores

CVSS 3.1

6.5

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Timeline

Apr 14, 2026 CVE Published
Apr 15, 2026 Security Advisory

References

https://nvd.nist.gov/vuln/detail/CVE-2026-27925 advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27925 url

Open in Interactive Console →