CVE-2026-32077: Windows UPnP Device Host Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
Other sources
Windows UPnP Device Host Elevation of Privilege Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.23132Fixed in 1.000Patch KB5082806 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.26026Fixed in 1.000Patch KB5082806 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.9060Patch KB5082198 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.8246Patch KB5083769 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.32690Patch KB5082063 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.25398.2274Patch KB5082060 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22631.6936Patch KB5082052 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26200.8246Patch KB5083769 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19045.7184Patch KB5082200 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19044.7184Patch KB5082200 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.5020Patch KB5082142 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.8644Patch KB5082123 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.28000.1836Patch KB5083768
Event History
Frequently Asked Questions
What is the severity of CVE-2026-32077?
CVE-2026-32077 is classified as an elevation of privilege vulnerability affecting Windows UPnP Device Host.
How do I fix CVE-2026-32077?
To fix CVE-2026-32077, apply the appropriate security update or patch provided by Microsoft for your affected Windows version.
Who is affected by CVE-2026-32077?
CVE-2026-32077 impacts users of Windows Server 2012 R2, Windows Server 2016, Windows 10, and other recent versions.
What type of attack does CVE-2026-32077 allow?
CVE-2026-32077 allows an authorized attacker to elevate their privileges locally on the affected system.
Is there a workaround for CVE-2026-32077?
There are no official workarounds for CVE-2026-32077; the recommended solution is to install the latest security updates.