Security Advisory

CVE-2025-26665

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-04-08 17:23:06

Last updated 2026-02-13 19:32:24

Assigner microsoft

State PUBLISHED

Sensitive data storage in improperly locked memory in Windows upnphost.dll allows an authorized attacker to elevate privileges locally.