Windows Server 2012 CVE-2026-32156

Local access to Windows system with UPnP Device Host service enabled. Requires ability to send crafted UPnP device discovery messages to trigger the use-after-free vulnerability in the device description parser.

Real-world risk is moderate despite the 7.4 CVSS score. The local attack vector (AV:L) significantly constrains exploitation scenarios to attackers who have already achieved code execution or physical access, limiting this to privilege escalation or persistence mechanisms rather than initial compromise vectors. High attack complexity (AC:H) indicates reliability challenges such as race condition timing or heap layout manipulation, reducing weaponization likelihood for mass exploitation. The lack of privilege requirements (PR:N) is notable for a local vulnerability, suggesting exploitation from low-privileged user contexts or even sandboxed environments. No public exploit identified at time of analysis and absence from CISA KEV indicates this has not been observed in active campaigns. However, use-after-free primitives in Windows system services represent high-value targets for APT groups and exploit developers due to their utility in bypassing modern exploit mitigations like CFG and ASLR. SSVC assessment: exploitation status is none, automatable is no (requires local access and timing precision), technical impact is total (full system compromise). Priority should focus on systems where local access by untrusted users is possible (multi-user servers, kiosk systems, jump boxes) rather than single-user workstations with strong access controls. The broad version coverage (12+ years of Windows releases) increases total exposure surface but also suggests stable exploitation techniques may exist across platforms.

An attacker with local access crafts a malicious UPnP device description triggering improper memory handling in Windows UPnP Device Host. By accessing the freed memory before reuse, they execute arbitrary code with system-level privileges for privilege escalation or lateral movement.