CVE-2019-1405: high-severity vulnerability in Microsoft Windows
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Patch now. It under exploitation confirmed by CISA and has a working public exploit.
Apply updates per vendor instructions.
The Windows UPnP service incorrectly allows creation of COM objects, letting an attacker with local access gain higher privileges on the system. This is dangerous because it bypasses normal security protections.
A privilege escalation vulnerability in the Windows UPnP service stemming from improper COM object instantiation control (CWE-269). An authenticated local attacker can leverage this to execute arbitrary code with elevated privileges by instantiating privileged COM objects, bypassing privilege boundary enforcement.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.