CVE-2026-27915: windows 10 1607 before 10.0.14393.9060 (exclusive); +33 more affected products

Affected technology

windows 10 1607 · before 10.0.14393.9060 (exclusive)
microsoft

windows 10 1809 · before 10.0.17763.8644 (exclusive)
microsoft

windows 10 21h2 · before 10.0.19044.7184 (exclusive)
microsoft

windows 10 22h2 · before 10.0.19045.7184 (exclusive)
microsoft

windows 11 23h2 · before 10.0.22631.6936 (exclusive)
microsoft

windows 11 24h2 · before 10.0.26100.8246 (exclusive)
microsoft

windows 11 25h2 · before 10.0.26200.8246 (exclusive)
microsoft

windows 11 26h1 · before 10.0.28000.1836 (exclusive)
microsoft

windows server 2012 · Version not applicable in the source CPE
microsoft

windows server 2012 · r2
microsoft

windows server 2016 · before 10.0.14393.9060 (exclusive)
microsoft

windows server 2019 · before 10.0.17763.8644 (exclusive)
microsoft

windows server 2022 · before 10.0.20348.5020 (exclusive)
microsoft

windows server 2022 23h2 · before 10.0.25398.2274 (exclusive)
microsoft

windows server 2025 · before 10.0.26100.32690 (exclusive)
microsoft

Windows 10 Version 1607 · 10.0.14393.0 to before 10.0.14393.9060
Microsoft

Windows 10 Version 1809 · 10.0.17763.0 to before 10.0.17763.8644
Microsoft

Windows 10 Version 21H2 · 10.0.19044.0 to before 10.0.19044.7184
Microsoft

Windows 10 Version 22H2 · 10.0.19045.0 to before 10.0.19045.7184
Microsoft

Windows 11 version 23H2 · 10.0.22631.0 to before 10.0.22631.6936
Microsoft

Windows 11 Version 24H2 · 10.0.26100.0 to before 10.0.26100.8246
Microsoft

Windows 11 Version 25H2 · 10.0.26200.0 to before 10.0.26200.8246
Microsoft

Windows 11 version 26H1 · 10.0.28000.0 to before 10.0.28000.1836
Microsoft

Windows Server 2012 · 6.2.9200.0 to before 6.2.9200.26026
Microsoft

Windows Server 2012 (Server Core installation) · 6.2.9200.0 to before 6.2.9200.26026
Microsoft

Windows Server 2012 R2 · 6.3.9600.0 to before 6.3.9600.23132
Microsoft

Windows Server 2012 R2 (Server Core installation) · 6.3.9600.0 to before 6.3.9600.23132
Microsoft

Windows Server 2016 · 10.0.14393.0 to before 10.0.14393.9060
Microsoft

Windows Server 2016 (Server Core installation) · 10.0.14393.0 to before 10.0.14393.9060
Microsoft

Windows Server 2019 · 10.0.17763.0 to before 10.0.17763.8644
Microsoft

Windows Server 2019 (Server Core installation) · 10.0.17763.0 to before 10.0.17763.8644
Microsoft

Windows Server 2022 · 10.0.20348.0 to before 10.0.20348.5020
Microsoft

Windows Server 2022, 23H2 Edition (Server Core installation) · 10.0.25398.0 to before 10.0.25398.2274
Microsoft

Windows Server 2025 · 10.0.26100.0 to before 10.0.26100.32690
Microsoft

Windows Server 2025 (Server Core installation) · 10.0.26100.0 to before 10.0.26100.32690
Microsoft

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

The source says use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. Vendor/CNA’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high.