CVE-2021-26899
HighCVSS 7.8Exploitation Probability (EPSS)
Elevated risk56th percentile - higher than 56% of all known CVEs
Summary
Elevation of privilege vulnerability in Windows UPnP Device Host. An attacker could exploit it to gain elevated privileges on the system.
Risk Assessment
Risk of unauthorized user taking control of the system.
Recommendation
Install the latest Windows security updates.
Other vulnerabilities in Windows UPnP Device Host
See all- CVE-2026-69351Medium
An exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locally.
- CVE-2026-68830Medium
A vulnerability in the Windows Universal Plug and Play (UPnP) Device Host involves improper link resolution before file access (link following). An authorized attacker could exploit this to disclose information locally.
Original NVD description (English source)
Windows UPnP Device Host Elevation of Privilege Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS