HIGHCVSS 7.8KNOWN EXPLOITEDRANSOMWARE: KNOWN

CVE-2019-1405

CVE-2019-1405 updated by NVD

Published: 2022-03-15
Modified: 2026-09-21
Sources: cisa-kev, nvd

Summary

An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'.

References

https://nvd.nist.gov/vuln/detail/CVE-2019-1405

Includes data from the CISA Known Exploited Vulnerabilities catalog.

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.