Security Advisory

CVE-2026-27920

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-04-14 16:58:10

Last updated 2026-08-14 16:31:04

Assigner microsoft

CVSS score 7.8

State PUBLISHED

Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.