CVE-2019-1405
| CVE Published | 2019-11-12 |
|---|---|
| Related Vendor(s) | microsoft |
| Related Product(s) | windows_8.1, windows_server_2008, windows_10, windows_server_2012, windows_server_2019, windows_server_2016, windows_7, windows_rt_8.1 |
| Exploitation Reported (CISA KEV) | 2022-03-15 |
| CVSS 3 Base Score | 7.8 (HIGH) |
| CVSS 3 Attack Complexity | LOW |
| CVSS 3 Attack Vector | LOCAL |
An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'.
Cyber Threat Graph Context
Explore how this CVE relates to the wider threat graph