CVE-2019-1253: high-severity vulnerability in Microsoft Windows
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.
Apply updates per vendor instructions.
A flaw in Windows AppX Deployment Server allows an attacker who already has access to a computer to gain higher privileges by exploiting how the system handles file system junctions. This lets them run code with administrator-level permissions without proper authorization.
An elevation of privilege vulnerability in Windows AppX Deployment Server stemming from improper junction handling (CWE-59) allows an authenticated local attacker to escalate privileges. The attack requires prior code execution on the target system and leverages symlink/junction manipulation to bypass security boundaries, resulting in execution with SYSTEM or elevated user context.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.