All CVE records
CVE-2019-1405 — Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability
Known ransomware use
CISA KEV listed
Added March 15, 2022 Remediate by April 5, 2022
Description
A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation.
Required action
Apply updates per vendor instructions.
Notes
Need help remediating this vulnerability?
Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.