CVE-2026-49180

نوع الضعف

Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.

المنتجات المتأثرة

• microsoft windows_10_1607
• microsoft windows_10_1809
• microsoft windows_10_21h2
• microsoft windows_10_22h2
• microsoft windows_11_24h2
• microsoft windows_11_25h2
• microsoft windows_11_26h1
• microsoft windows_server_2012

المراجع

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49180