CVE-2019-1405 Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability

KNOWN EXPLOITED VULNERABILITY

CISA KEV 处置信息

已确认在野利用已用于勒索攻击

要求采取的措施

Apply updates per vendor instructions.

CISA 说明

https://nvd.nist.gov/vuln/detail/CVE-2019-1405

A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation.

暂无结构化产品信息。

Apply updates per vendor instructions.