CVE-2019-1405

CVE-2019-1405 is an elevation of privilege vulnerability affecting Microsoft Windows Universal Plug and Play (UPnP) service, where improper COM object creation allows an attacker to gain elevated privileges. With a CVSS score of 7.8 (HIGH), this vulnerability has a low attack complexity and requires local access and user interaction, but can lead to complete compromise of confidentiality, integrity, and availability. This vulnerability is actively exploited, as confirmed by its inclusion in CISA's KEV catalog and documented use in ransomware campaigns by Russian-speaking threat actors. Publicly available exploit modules exist in Metasploit and ExploitDB, and it has garnered significant community discussion and media coverage.