CVE-2026-69351

MEDIUMCVSS 5.5

Description

Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locally.

Timeline

Published:September 8th, 2026 6:18 PM

Last modified:September 8th, 2026 8:17 PM

CVSS Scoring

CVSS v3: 5.5 (MEDIUM)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-359

References & Reports

Advisories, patches, and third-party reports

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69351

Source: NIST NVD · Data may lag official sources by up to one minute