CVE

CVE-2019-1405

P1⬤ KNOWN RANSOMWARE USE

Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability

Microsoft · Windows

Date added (CISA)

2022-03-15

Remediation due

2022-04-05

Known ransomware use

Yes

Remediation priority

P1 — known ransomware use · past CISA due date

Description

A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation.