← Back to CVEs
CVE-2026-32156
HIGH7.4
Description
Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to execute code locally.
CVE Details
CVSS v3.1 Score7.4
SeverityHIGH
CVSS VectorCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack VectorLOCAL
ComplexityHIGH
Privileges RequiredNONE
User InteractionNONE
Published4/14/2026
Last Modified4/17/2026
Sourcenvd
Honeypot Sightings0
Weaknesses (CWE)
CWE-416
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32156(secure@microsoft.com)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.