{
  "id": "CVE-2019-1253",
  "url": "https://spydr.io/cve/CVE-2019-1253",
  "published": "2019-09-11T22:15:16.337Z",
  "modified": "2026-06-17T02:28:14.563Z",
  "score": 7.8,
  "severity": "high",
  "cvss_version": "3.1",
  "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "score_source": "NVD",
  "epss": 0.11616,
  "epss_percentile": 0.95946,
  "exploited": true,
  "kev": {
    "added": "2022-03-15",
    "due": "2022-04-05",
    "action": "Apply updates per vendor instructions.",
    "ransomware": "Known",
    "name": "Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability",
    "notes": "https://nvd.nist.gov/vuln/detail/CVE-2019-1253"
  },
  "ssvc_exploitation": "active",
  "vendors": [
    "Microsoft"
  ],
  "products": [
    "Microsoft Windows",
    "Microsoft Windows Server",
    "Microsoft Windows 10 Version 1903 for 32-bit Systems",
    "Microsoft Windows 10 Version 1903 for x64-based Systems",
    "Microsoft Windows 10 Version 1903 for ARM64-based Systems",
    "Microsoft Windows Server, version 1903 (Server Core installation)"
  ],
  "cwes": [
    "CWE-59"
  ],
  "description": "An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1215, CVE-2019-1278, CVE-2019-1303.",
  "status": "Analyzed",
  "score_type": "Primary",
  "scores": {
    "cvss_v40": null,
    "cvss_v31": 7.8,
    "cvss_v30": null
  },
  "references": [
    {
      "url": "http://packetstormsecurity.com/files/154488/AppXSvc-17763.1.amd64fre.rs5_release.180914-1434-Privilege-Escalation.html",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ]
    },
    {
      "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1253",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ]
    },
    {
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1253",
      "tags": [
        "US Government Resource"
      ]
    }
  ],
  "nvd_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1253",
  "covered_in": [],
  "attribution": [
    {
      "source": "NVD",
      "url": "https://nvd.nist.gov",
      "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD."
    },
    {
      "source": "CISA KEV",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "notice": "Known exploited vulnerabilities from the CISA KEV catalog."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss",
      "notice": "Exploit prediction scores from FIRST EPSS."
    }
  ]
}