Universal Plug and Play (upnp.dll) vulnerabilities

Improper link resolution before file access in Universal Plug and Play (upnp.dll). Allows an authorized attacker to disclose information locally.

A type confusion vulnerability in the Universal Plug and Play component (upnp.dll) allows an unauthorized attacker to execute code remotely over a network.

A use-after-free vulnerability in the Universal Plug and Play component (upnp.dll) allows an unauthorized attacker to execute code remotely over a network.

A vulnerability in Universal Plug and Play (upnp.dll) stems from improper link resolution before file access ('link following'). An authorized attacker can exploit this flaw to disclose information locally.