Security Advisory

CVE-2026-27920

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-04-14 16:58:10

Last updated 2026-06-19 16:08:30

Assigner microsoft

State PUBLISHED

Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.