Windows UPnP Device Host vulnerabilities

An exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locally.

A vulnerability in the Windows Universal Plug and Play (UPnP) Device Host involves improper link resolution before file access (link following). An authorized attacker could exploit this to disclose information locally.

Elevation of privilege vulnerability in Windows UPnP Device Host. An attacker could exploit it to gain elevated privileges on the system.