CVE-2019-1385
Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability
Published Nov 12, 2019 · updated Aug 11, 2026 · microsoft windows 10 1709
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privileges.The security update addresses the vulnerability by correcting how AppX Deployment Extensions manages privileges., aka 'Windows AppX Deployment Extensions Elevation of Privilege Vulnerability'.
Timeline
Detection, updates, and resolution for this record.
Nov 12, 2019 · Catalog
Detected
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privileges.The security update addresses the vulnerability by correcting how AppX Deployment Extensions manages p
May 23, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Jun 13, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Aug 11, 2026 · Catalog
Updated
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privileges.The security update addresses the vulnerability by correcting how AppX Deployment Extensions manages p
Required action
Apply updates per vendor instructions.
CISA due date Jun 13, 2022
Affected
- cpe microsoft/windows 10 1709version unspecified
- cpe microsoft/windows 10 1803version unspecified
- cpe microsoft/windows 10 1809version unspecified
- cpe microsoft/windows 10 1903version unspecified
- cpe microsoft/windows server 2016version unspecified
- cpe microsoft/windows server 2019version unspecified
- vendor Microsoft Windowsversion unspecified
Sources
- CISA KEVCVE-2019-1385
A privilege escalation vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.
cisa.gov - CVE.orgCVE-2019-1385
Official CVE identifier
cve.org - FIRST EPSSCVE-2019-1385
30-day exploitation probability 3.6%
first.org - NIST NVDCVE-2019-1385
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to e
nvd.nist.gov