A use after free vulnerability in the Windows UPnP Device Host enables a local attacker to escalate privileges, posing a significant risk to system integrity.

This is a use after free flaw within the Windows Universal Plug and Play (UPnP) Device Host service. The vulnerability allows an authenticated attacker with low privileges to execute arbitrary code with elevated system rights.

The CVSS score of 7.8 indicates a high severity risk that could lead to full system compromise. Successful exploitation grants the attacker elevated privileges, potentially resulting in unauthorized data access, the installation of malicious software, or the complete loss of control over the affected workstation or server.

Immediate Action: Administrators must apply the latest security updates provided in the Microsoft Security Update Guide to all affected Windows systems.

Proactive Monitoring: Security teams should monitor system logs for unusual process execution or errors related to the UPnP Device Host service.

Compensating Controls: Ensure that the Principle of Least Privilege is enforced for all user accounts to minimize the potential impact of local privilege escalation attempts.

Public Exploit Available: Unknown

Given the potential for privilege escalation and the high severity score, organizations should prioritize patching these systems as part of their regular update cycle. Ensure that all identified Windows versions are brought up to the specified build numbers to remediate the underlying memory safety issue and prevent potential exploitation.