CVE-2019-1303
First published: Wed Sep 11 2019(Updated: )
An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1215, CVE-2019-1253, CVE-2019-1278.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Windows 10 | =1703 | |
| Microsoft Windows 10 | =1709 | |
| Microsoft Windows 10 | =1803 | |
| Microsoft Windows 10 | =1809 | |
| Microsoft Windows 10 | =1903 | |
| Microsoft Windows Server 2016 | =1803 | |
| Microsoft Windows Server 2016 | =1903 | |
| Microsoft Windows Server 2019 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2019-1303?
CVE-2019-1303 is rated as an elevation of privilege vulnerability, which can allow an attacker to gain higher-level access to the system.
How do I fix CVE-2019-1303?
To mitigate CVE-2019-1303, apply the latest security updates provided by Microsoft for affected Windows versions.
What platforms are affected by CVE-2019-1303?
CVE-2019-1303 affects specific versions of Microsoft Windows 10 and Windows Server 2016 and 2019.
What are the potential exploitation requirements for CVE-2019-1303?
An attacker must first gain execution on the victim system to successfully exploit CVE-2019-1303.
What types of vulnerabilities does CVE-2019-1303 represent?
CVE-2019-1303 represents an elevation of privilege vulnerability specifically related to the Windows AppX Deployment Server.
- agent/type
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/remedy
- agent/severity
- agent/references
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/tags
- agent/first-publish-date
- agent/event
- agent/source
- vendor/microsoft
- canonical/microsoft windows 10
- version/microsoft windows 10/1703
- version/microsoft windows 10/1709
- version/microsoft windows 10/1803
- version/microsoft windows 10/1809
- version/microsoft windows 10/1903
- canonical/microsoft windows server 2016
- version/microsoft windows server 2016/1803
- version/microsoft windows server 2016/1903
- canonical/microsoft windows server 2019