> CVE-2026-85373 Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

[SOURCE] Microsoft Security Update Guide [DATE: 13/10/2026 14:00] [LANGUAGE: EN]

Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.