High severity7.8NVD Advisory· Published Oct 13, 2026· Updated Oct 13, 2026
CVE-2026-85927
CVE-2026-85927
Description
Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.