CVE-2019-1405
KEV RANSOMWAREHIGH 7.8EPSS 29.9%
An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'.
- CVSS v3.1
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v3.1
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0
- 7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 29.95% chance of exploitation in the next 30 days, 98th percentile
- CISA KEV
- added 2022-03-15, used in ransomware campaigns
- Published
- 2019-11-12
- Updated
- 2026-08-12