← Back to browse · API

CVE-2019-1253

Severity
HIGH
CVSS
7.8
EPSS
0.11616
Risk score
60.27
CISA KEV
Yes
PoC
No
Published
2022-03-15
Modified
2022-03-15
First seen
2026-08-07
Aliases
EUVD-2019-9819, GHSA-WP5J-PPW9-22MW
Products
Microsoft:Windows, Microsoft:Windows 10 Version 1703 for 32-bit Systems, Microsoft:Windows 10 Version 1703 for x64-based Systems, Microsoft:Windows 10 Version 1709 for 32-bit Systems, Microsoft:Windows 10 Version 1709 for ARM64-based Systems, Microsoft:Windows 10 Version 1709 for x64-based Systems, Microsoft:Windows 10 Version 1803 for 32-bit Systems, Microsoft:Windows 10 Version 1803 for ARM64-based Systems, Microsoft:Windows 10 Version 1803 for x64-based Systems, Microsoft:Windows 10 Version 1809 for 32-bit Systems, Microsoft:Windows 10 Version 1809 for ARM64-based Systems, Microsoft:Windows 10 Version 1809 for x64-based Systems, Microsoft:Windows 10 Version 1903 for 32-bit Systems unspecified, Microsoft:Windows 10 Version 1903 for ARM64-based Systems unspecified, Microsoft:Windows 10 Version 1903 for x64-based Systems unspecified, Microsoft:Windows Server 2019, Microsoft:Windows Server 2019 (Core installation), Microsoft:Windows Server version 1803 (Core Installation), Microsoft:Windows Server, version 1903 (Server Core installation) unspecified
Sources
euvd EUVD-2019-9819
cisa.gov CVE-2019-1253

Description

A privilege escalation vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.

References