CVE-2019-1405 Microsoft Windows
A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation.
- CVSS
- not scored
On CISA’s exploited list
Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability
- Added
- 2022-03-15
- Federal patch deadline
- 2022-04-05
- Ransomware use
- known