Описание
Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2026-32077
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32077
- https://www.vicarius.io/vsociety/posts/cve-2026-32077-detection-script-elevation-of-privilege-vulnerability-affecting-windows-upnp
- https://www.vicarius.io/vsociety/posts/cve-2026-32077-mitigation-script-elevation-of-privilege-vulnerability-affecting-windows-upnp
Связанные уязвимости
CVSS3: 7.8
nvd
4 месяца назад
Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
CVSS3: 7.8
msrc
4 месяца назад
Windows UPnP Device Host Elevation of Privilege Vulnerability
CVSS3: 7.8
fstec
4 месяца назад
Уязвимость службы Universal Plug and Play (UPnP) Device Host Service операционных систем Windows, позволяющая нарушителю повысить свои привилегии