CVE-2019-1405 — Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability

CISA KEVExploited: confirmedMicrosoft

A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation.

Vulnerability details