CVE-2026-69351

MediumCVSS 5.5/10Last modified Sep 24, 2026

Description

Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locally.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-359

Affected software

No affected versions have been published.

Timeline

Published
Sep 8, 2026
Last modified
Sep 24, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-693527.8Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.CVE-2026-693535.5Out-of-bounds read in Windows Text Shaping allows an authorized attacker to disclose information locally.CVE-2026-693547.8Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.CVE-2026-693558.8External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network.CVE-2026-693569.3Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attCVE-2026-693577.1Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.CVE-2026-693587.1Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.CVE-2026-693597.8Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally.CVE-2026-69366.5IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a denial-of-service attack due to uncontrolled recursion in the Integrated Language EnvironmentCVE-2026-693608.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-693616.5Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.CVE-2026-693627.0Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-69351: Medium severity, CVSS 5.5 | Vulnix