Security Advisory

CVE-2026-27915

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-04-14 16:57:10

Last updated 2026-06-19 16:07:40

Assigner microsoft

State PUBLISHED

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.