VULNERABILITY INTELLIGENCE

CVE-2025-48821

CVSS score7.1 HIGH

EPSS probability0.52%

CISA KEVNot currently listed

Published2025-07-08

Last modified2026-06-17

Description

Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over an adjacent network.