Security Advisory

CVE-2026-27916

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-04-14 16:58:09

Last updated 2026-06-19 16:08:29

Assigner microsoft

State PUBLISHED

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.