VulniPulse uses Google Ads measurement to understand visits from advertisements and campaign performance. It runs cookie-free until you choose — accepting enables cookies for more accurate attribution. Rejecting keeps it cookie-free and never limits the site.
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025.
What this means
In plain English
Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025.
Recommended action
Upgrade to a vendor-listed fixed release: KB5099538 (build 10.0.17763.9020), KB5099540 (build 10.0.20348.5386), KB5099539 (build 10.0.19045.7548), KB5099536 (build 10.0.26100.33158), KB5101650 (build 10.0.26100.8875), KB5101649 (build 10.0.28000.2525). Vendor-listed mitigations/workarounds: Install the applicable security update for your platform: KB5099538, KB5099540, KB5099539, KB5099536, KB5101650, KB5101649 (see the Microsoft Update Catalog).
Generated from the parsed advisory data above. The vendor advisory is authoritative.
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
No affected-version range was extracted from the source record. The vendor advisory is authoritative — check it before change work.
Official advisory · high-confidence parse· fetched 3 hours ago·verify at source
Fixed versions
KB5099538 (build 10.0.17763.9020)
KB5099540 (build 10.0.20348.5386)
KB5099539 (build 10.0.19045.7548)
KB5099536 (build 10.0.26100.33158)
KB5101650 (build 10.0.26100.8875)
KB5101649 (build 10.0.28000.2525)
Official advisory · high-confidence parse· fetched 3 hours ago·verify at source
Mitigation checklist
Recommended fix / mitigation
Install the applicable security update for your platform: KB5099538, KB5099540, KB5099539, KB5099536, KB5101650, KB5101649 (see the Microsoft Update Catalog).
Official advisory · high-confidence parse· fetched 3 hours ago·verify at source
Official documentation
Direct download of the KB5099540 security update named in the MSRC remediation data for this CVE.