BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more
← CVE Radar

CVE-2019-1385Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability

An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privileges.The security update addresses the vulnerability by correcting how AppX Deployment Extensions manages privileges., aka 'Windows AppX Deployment Extensions Elevation of Privilege Vulnerability'.

7.8 HIGHEPSS 3.60%⚡ Known Exploited (CISA KEV)NVD: Analyzed

Overview

Severity

ScoreSeverityVersionVector String
7.8HIGH3.1NVDCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
6.1MEDIUM2.0NVDAV:L/AC:L/Au:N/C:P/I:P/A:C

CISA required action

⚡ Known exploited · remediation due Jun 13, 2022

Apply updates per vendor instructions.

Details

CVE ID
CVE-2019-1385
Status
Analyzed
Assigner (CNA)
microsoft
Published
Nov 12, 2019
Last modified
2026-08-12 05:17 UTC
Weaknesses

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-09 15:15 UTC.