A critical vulnerability in the Windows UPnP Device Host allows an authenticated local attacker to escalate privileges to full system access.

This flaw is an untrusted pointer dereference (CWE-822) within the Windows UPnP Device Host component. A locally authenticated attacker with low privileges can trigger this condition to gain elevated system privileges.

Successful exploitation of this vulnerability permits an attacker to bypass security boundaries and execute arbitrary code with elevated system privileges. Given the CVSS score of 7.8, this represents a high-severity risk that could lead to full system compromise, unauthorized data access, and persistence within the environment.

Immediate Action: Apply the latest security updates provided by Microsoft in the official update guide to address the vulnerable UPnP Device Host component.

Proactive Monitoring: Monitor system logs for unusual process execution or unauthorized attempts to interact with the UPnP Device Host service.

Compensating Controls: Ensure that local user permissions are strictly enforced and limit the ability of non-administrative users to execute unauthorized software or scripts on sensitive endpoints.

Public Exploit Available: No (exploit_available: false)

The severity of this privilege escalation vulnerability necessitates prompt patching across all identified versions of Windows. System administrators should prioritize the deployment of the vendor-supplied updates to mitigate the risk of local security boundary bypass and unauthorized system-level access.