CVE Catalog
CVE-2026-50455
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.30%
22th percentile - higher than 22% of all known CVEs
Summary
Use of uninitialized resource in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.
Risk Assessment
An authorized user can access sensitive data in the system, potentially leading to privilege escalation or further attacks.
Recommendation
Install the latest security updates from Microsoft. Restrict system access to trusted users only.
Other vulnerabilities in Windows UPnP
Original NVD description (English source)
Use of uninitialized resource in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS