An untrusted pointer dereference vulnerability in the Microsoft Windows UPnP Device Host allows an authorized local attacker to elevate their privileges to a higher level.

This vulnerability is caused by an untrusted pointer dereference within the UPnP Device Host service. It requires an attacker to already possess local access with low privileges to trigger the flaw and elevate their authority on the target system.

Successful exploitation of this vulnerability allows a local user to gain unauthorized administrative privileges on the host system. Given the CVSS score of 7.8, this represents a high risk to the confidentiality, integrity, and availability of the affected workstation or server. Privilege escalation often serves as a critical stage in broader attack chains, potentially leading to full system compromise or lateral movement within the enterprise network.

Immediate Action: Update affected Windows installations to the latest security patch provided by Microsoft in the official update guide.

Proactive Monitoring: Monitor system logs for unusual service crashes related to the UPnP Device Host or unexpected elevation of user privileges.

Compensating Controls: Restrict local user access and follow the principle of least privilege to prevent unauthorized users from executing code in vulnerable environments.

Public Exploit Available: No (exploit_available: false)

Organizations should prioritize the deployment of the relevant Microsoft security updates across all affected Windows versions. While the attack vector is local, the ability to escalate privileges makes this a significant security concern for any environment where non-administrative users have access to the underlying OS. Apply the provided patches promptly to remediate the underlying pointer dereference flaw.