CVE-2019-1385
גבוהה 7.8 מנוצלת בשטח (KEV) בשימוש בכופרה
ניצול פעיל מאומת — קטלוג CISA KEV
- שם
- Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability
- נוסף לקטלוג
- יעד טיפול (פדרלי)
- פעולה נדרשת
- Apply updates per vendor instructions.
תיאור (מקור, אנגלית)
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privileges.The security update addresses the vulnerability by correcting how AppX Deployment Extensions manages privileges., aka 'Windows AppX Deployment Extensions Elevation of Privilege Vulnerability'.
מדדים
- CVSS 3.1
-
7.8 (HIGH)
מקור הציון: NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 4% (אחוזון 100) נכון ל-4/8/2026
- CWE
- CWE-59
מוצרים מושפעים
microsoft: windows 10 1709; microsoft: windows 10 1803; microsoft: windows 10 1809; microsoft: windows 10 1903; microsoft: windows server 2016; microsoft: windows server 2019
קישורים
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1385 PatchVendor Advisory
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1385 PatchVendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-19-979/ Third Party Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-19-979/ Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-201… US Government Resource