CVE-2019-1405
KEV · RansomwareMicrosoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability
View CVE record →- Vendor / Project
- Microsoft
- Product
- Windows
- Date added
- Mar 15, 2022
- Due date
- Apr 5, 2022
- Known ransomware use
- Known
- CWEs
- —
Description
A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation.
Required action
Apply updates per vendor instructions.