Microsoft · Windows
CVE-2019-1385
Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability
무엇인가
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privileges.The security update addresses the vulnerability by correcting how AppX Deployment Extensions manages privileges., aka 'Windows AppX Deployment Extensions Elevation of Privilege Vulnerability'.
CISA: A privilege escalation vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.
할 일
Apply updates per vendor instructions.
미국 연방 기관 조치 기한: 2022년 6월 13일
Microsoft의 다른 악용된 결함
| 추가됨 | 취약점 | 제품 | 심각도 | 공격 가능성 |
|---|---|---|---|---|
| 2026. 10. 13. | Command Injection | Windows | 높음 8.8 | 9.8% |
| 2026. 9. 8. | Link Following | Windows | 높음 7.8 | 0.4% |
| 2026. 9. 8. | Heap-Based Buffer Overflow | Windows | 높음 7.8 | 0.4% |
| 2026. 5. 20. | Buffer Overflow | Windows | 치명적 9.8 | 99% |
| 2026. 4. 28. | Protection Mechanism Failure | Windows | 보통 4.3 | 71% |
| 2026. 4. 13. | Out-of-Bounds Read | Windows | 높음 7.8 | 12% |
| 2026. 4. 13. | Link Following | Windows | 높음 7.8 | 4.6% |
| 2026. 2. 17. | Microsoft Windows Video ActiveX Control Remote Code Execution | Windows | 높음 8.8 | 77% |
출처: Known Exploited Vulnerabilities(CISA, 퍼블릭 도메인), CVE records(cve.org), EPSS(FIRST). 공격 가능성은 누군가 향후 30일 안에 이 결함을 악용하려 할 확률에 대한 EPSS 추정치입니다.