CVE-2019-1405

Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability

Windows 10 1507

An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'.

12. Nov 2019

Ausgewertete Quellen

• Microsoft
  https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1405
• Hinweis
  http://packetstormsecurity.com/files/155723/Microsoft-UPnP-Local-Privilege-Elevation.html
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1405
• CISA
  Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability
• NVD
  CVE-2019-1405