An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka Windows Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2019-1215, CVE-2019-1278, CVE-2019-1303.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Windows_10_1703 | Microsoft | - (including) | - (including) |
| Windows_10_1709 | Microsoft | - (including) | - (including) |
| Windows_10_1803 | Microsoft | - (including) | - (including) |
| Windows_10_1809 | Microsoft | - (including) | - (including) |
| Windows_10_1903 | Microsoft | - (including) | - (including) |
| Windows_server_1803 | Microsoft | - (including) | - (including) |
| Windows_server_1903 | Microsoft | - (including) | - (including) |
| Windows_server_2019 | Microsoft | - (including) | - (including) |
References
- http://packetstormsecurity.com/files/154488/AppXSvc-17763.1.amd64fre.rs5_release.180914-1434-Privilege-Escalation.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1253
- http://packetstormsecurity.com/files/154488/AppXSvc-17763.1.amd64fre.rs5_release.180914-1434-Privilege-Escalation.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1253
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1253