CVE-2019-1385
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privileges.The security update addresses the vulnerability by correcting how AppX Deployment Extensions manages privileges., aka 'Windows AppX Deployment Extensions Elevation of Privilege Vulnerability'.
- Affected products
- Windows, Windows Appx Deployment Server
- Microsoft Windows 10 1709
- All versions
- Microsoft Windows 10 1803
- All versions
- Microsoft Windows 10 1809
- All versions
- Microsoft Windows 10 1903
- All versions
- Microsoft Windows Server 2016
- All versions
- Microsoft Windows Server 2019
- All versions
- CVSS 3.1
- 7.8 HIGH
- EPSS
- 3.6% (88th percentile)
- Weakness
- CWE-59
- NVD status
- Analyzed
- Published
- 2019-11-12
CVE-2019-1385 at NVD
6 known exploits for CVE-2019-1385
Proof-of-concept code and exploit modules indexed by Sploitus
PatchChecker - Web-based Check For Windows Privesc Vulnerabilities
dazzleUP - A Tool That Detects The Privilege Escalation Vulnerabilities Caused By Misconfigurations And Missing Updates In The Windows OS
Microsoft Windows AppXsvc Deployment Extension - Privilege Escalation Vulnerability
Microsoft Windows AppXsvc Deployment Extension Privilege Escalation
Microsoft Windows AppXsvc Deployment Extension - Privilege Escalation
Microsoft Windows AppXsvc Deployment Extension - Privilege Escalation