CVE-2025-48819

High

Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to…

secure@microsoft.com·CWE-591·Published 2025-07-08

CVSS

7.1

EPSS

0.00

KEV

Exploits

cve.orgen

182 chars

Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over an adjacent network.

NVDen

182 chars

Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over an adjacent network.

NVDes

211 chars

El almacenamiento de datos confidenciales en una memoria bloqueada incorrectamente en Windows Universal Plug and Play (UPnP) Device Host permite que un atacante autorizado eleve privilegios en una red adyacente.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	7.1	—	—	CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
3.1	Secondary	NVD	7.1	1.2	5.9	CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H