VulniPulse uses Google Ads measurement to understand visits from advertisements and campaign performance. It runs cookie-free until you choose — accepting enables cookies for more accurate attribution. Rejecting keeps it cookie-free and never limits the site.
Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
What this means
In plain English
Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
Recommended action
Upgrade to a vendor-listed fixed release: KB5099538 (build 10.0.17763.9020), KB5099540 (build 10.0.20348.5386), KB5099539 (build 10.0.19045.7548), KB5099536 (build 10.0.26100.33158), KB5101650 (build 10.0.26100.8875), KB5095051 (build 10.0.28000.2269), KB5101649 (build 10.0.28000.2525), KB5099535 (build 10.0.14393.9339). Vendor-listed mitigations/workarounds: Install the applicable security update for your platform: KB5099538, KB5099540, KB5099539, KB5099536, KB5101650, KB5095051 (see the Microsoft Update Catalog).
Generated from the parsed advisory data above. The vendor advisory is authoritative.
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
No affected-version range was extracted from the source record. The vendor advisory is authoritative — check it before change work.
Official advisory · high-confidence parse· fetched 3 hours ago·verify at source
Fixed versions
KB5099538 (build 10.0.17763.9020)
KB5099540 (build 10.0.20348.5386)
KB5099539 (build 10.0.19045.7548)
KB5099536 (build 10.0.26100.33158)
KB5101650 (build 10.0.26100.8875)
KB5095051 (build 10.0.28000.2269)
KB5101649 (build 10.0.28000.2525)
KB5099535 (build 10.0.14393.9339)
Official advisory · high-confidence parse· fetched 3 hours ago·verify at source
Mitigation checklist
Recommended fix / mitigation
Install the applicable security update for your platform: KB5099538, KB5099540, KB5099539, KB5099536, KB5101650, KB5095051 (see the Microsoft Update Catalog).
Official advisory · high-confidence parse· fetched 3 hours ago·verify at source
Official documentation
Direct download of the KB5099540 security update named in the MSRC remediation data for this CVE.