Описание
Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2026-32077
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32077
- https://www.vicarius.io/vsociety/posts/cve-2026-32077-detection-script-elevation-of-privilege-vulnerability-affecting-windows-upnp
- https://www.vicarius.io/vsociety/posts/cve-2026-32077-mitigation-script-elevation-of-privilege-vulnerability-affecting-windows-upnp
Связанные уязвимости
CVSS3: 7.8
nvd
5 месяцев назад
Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
CVSS3: 7.8
msrc
5 месяцев назад
Windows UPnP Device Host Elevation of Privilege Vulnerability
CVSS3: 7.8
fstec
5 месяцев назад
Уязвимость службы Universal Plug and Play (UPnP) Device Host Service операционных систем Windows, позволяющая нарушителю повысить свои привилегии