CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2019-11-12
Windows AppX Deployment Extensions Elevation of Privilege Vulnerability (CVE-2019-1385) Analysis and Mitigation Guide
[Affected Scope] Windows AppX Deployment Extensions component running on Windows 10 and Windows Server environments.
[Impact] An authenticated local attacker can execute a specially crafted application to access system files, leading to full SYSTEM privilege escalation.
[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict symbolic link creation privileges for non-administrative users.