Microsoft update

KB5082806

IE Cumulative

Fixed in

TI-2026-24616 CVE-2026-32077 · GHSA-6m73-7rxg-5fwh

LOW 36

Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00321 Published 2026-04-14 Fixed in 10.0.14393.9060, 10.0.17763.8644 +11 CWE-822