{"cvss":7.8,"datePublished":"2022-03-15","dateUpdated":"2022-03-15","description":"A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation.","dueDate":"2022-04-05","id":"CVE-2019-1405","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Known","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1405","product":"Windows","requiredAction":"Apply updates per vendor instructions.","severity":"HIGH","source":"cisa_known_exploited","title":"Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability","vendor":"Microsoft"}