Security Advisory

CVE-2025-27484

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-04-08 17:23:58
Last updated 2026-02-13 19:33:15
Assigner microsoft
State PUBLISHED

Description

Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over a network.