Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to disclose information over an adjacent network.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 14 products
| Date | Total | Labels |
|---|
| 2026-04-14 | 1 | Disclousure1 |
| 2026-04-15 | 1 | Disclosure1 |
CVE-2026-27925 Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to disclose information over an adjacent network. https://www.cve.org/CVERecord?id=CVE-2026-27925
Post summary
The excerpt details a use‑after‑free vulnerability in Windows UPnP Device Host that could lead to network information disclosure, but provides no PoC, exploit, patch, or evidence of active exploitation.
🪟 CVE-2026-27925 is a “tiny” UPnP info leak, but Microsoft’s confidence rating says it’s not vibes. Translation: check your UPnP like it’s always on. Because Windows. https://windowsforum.com/threads/cve-2026-27925-upnp-device-host-info-leak-use-microsoft-confidence-to-triage.413017/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #WindowsSecurity #InformationDisclosure #UpnpDeviceHost #CveTriage https://t.co/pALAQX9nwt
Post summary
The post announces a small UPnP information‑leak vulnerability (CVE‑2026‑27925) and notes Microsoft’s low confidence rating, but provides no PoC, exploit, or patch details.
25 of 25 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | microsoft | windows_10_1607 | - | - | x64 |
| OS | microsoft | windows_10_1607 | - | - | x86 |
| OS | microsoft | windows_10_1809 | - | - | x64 |
| OS | microsoft | windows_10_1809 | - | - | x86 |
| OS | microsoft | windows_10_21h2 | - | - | arm64 |
| OS | microsoft | windows_10_21h2 | - | - | x64 |
| OS | microsoft | windows_10_21h2 | - | - | x86 |
| OS | microsoft | windows_10_22h2 | - | - | arm64 |
| OS | microsoft | windows_10_22h2 | - | - | x64 |
| OS | microsoft | windows_10_22h2 | - | - | x86 |
| OS | microsoft | windows_11_23h2 | - | - | arm64 |
| OS | microsoft | windows_11_23h2 | - | - | x64 |
| OS | microsoft | windows_11_24h2 | - | - | arm64 |
| OS | microsoft | windows_11_24h2 | - | - | x64 |
| OS | microsoft | windows_11_25h2 | - | - | arm64 |
| OS | microsoft | windows_11_25h2 | - | - | x64 |
| OS | microsoft | windows_11_26h1 | - | - | arm64 |
| OS | microsoft | windows_11_26h1 | - | - | x64 |
| OS | microsoft | windows_server_2012 | - | - | - |
| OS | microsoft | windows_server_2012 | r2 | - | - |
| OS | microsoft | windows_server_2016 | - | - | - |
| OS | microsoft | windows_server_2019 | - | - | - |
| OS | microsoft | windows_server_2022 | - | - | - |
| OS | microsoft | windows_server_2022_23h2 | - | - | - |
| OS | microsoft | windows_server_2025 | - | - | - |