CyberSec.Space Logo
Back to CVE Browser

CVE-2019-1253

Known Exploited (CISA KEV)HIGH
7.8
CVSS Severity Score
EPSS Score63.1620%
EPSS Percentile96.73th
PublishedSep 11, 2019
Last ModifiedOct 29, 2025

Vulnerability Description

An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1215, CVE-2019-1278, CVE-2019-1303.

Affected Platforms (CPE)

💻
Microsoft

Windows 10 1703

All versions
💻
Microsoft

Windows 10 1703

All versions
💻
Microsoft

Windows 10 1709

All versions
💻
Microsoft

Windows 10 1709

All versions
💻
Microsoft

Windows 10 1709

All versions
💻
Microsoft

Windows 10 1803

All versions
💻
Microsoft

Windows 10 1803

All versions
💻
Microsoft

Windows 10 1803

All versions
💻
Microsoft

Windows 10 1809

All versions
💻
Microsoft

Windows 10 1809

All versions
💻
Microsoft

Windows 10 1809

All versions
💻
Microsoft

Windows 10 1903

All versions
💻
Microsoft

Windows 10 1903

All versions
💻
Microsoft

Windows 10 1903

All versions
💻
Microsoft

Windows Server 1803

All versions
💻
Microsoft

Windows Server 1903

All versions
💻
Microsoft

Windows Server 2019

All versions

References & Advisories

🔗 http://packetstormsecurity.com/files/154488/AppXSvc-17763.1.amd64fre.rs5_release.180914-1434-Privilege-Escalation.html
🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1253
🔗 http://packetstormsecurity.com/files/154488/AppXSvc-17763.1.amd64fre.rs5_release.180914-1434-Privilege-Escalation.html
🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1253
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1253

Related Vulnerabilities

CVE-2017-85899.8

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 1...

CVE-2017-117719.8

The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server...

CVE-2017-85439.8

Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R...

CVE-2017-118999.8

Device Guard in Windows 10 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows a security featu...