CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1–1 of 1 advisories (Page 1/1)
2019-09-11
Windows AppX Deployment Server (AppXSvc) Elevation of Privilege Vulnerability via Junction Handling (CVE-2019-1253)
[Affected Scope] Windows AppX Deployment Service (AppXSvc) running on affected Windows 10 and Windows Server environments
[Impact] Local attackers can exploit improper junction link handling to elevate privileges to NT AUTHORITY\SYSTEM, leading to complete system compromise
[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict symbolic link creation privileges