Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2019-1253

KEV · Ransomware EPSS 31.94% · P97
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2019-1253

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1215, CVE-2019-1278, CVE-2019-1303.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Microsoft Windows和Microsoft Windows Server 后置链接漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Windows和Microsoft Windows Server都是美国微软(Microsoft)公司的产品。Microsoft Windows是一套个人设备使用的操作系统。Microsoft Windows Server是一套服务器操作系统。 Microsoft Windows和Microsoft Windows Server中存在安全漏洞。攻击者可通过在用户系统上获取执行权并运行特制的应用程序利用该漏洞提升权限。以下产品及版本受到影响:Microsoft Windows 10版本1
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Affected Products

VendorProductAffected VersionsCPESubscribe
MicrosoftWindows 10 Version 1703 for 32-bit Systems -
MicrosoftWindows Server version 1803 (Core Installation) -
MicrosoftWindows 10 Version 1903 for 32-bit Systems unspecified -
MicrosoftWindows 10 Version 1903 for x64-based Systems unspecified -
MicrosoftWindows 10 Version 1903 for ARM64-based Systems unspecified -
MicrosoftWindows Server, version 1903 (Server Core installation) unspecified -

II. Public POCs for CVE-2019-1253

#POC DescriptionSource LinkShenlong Link
1Nonehttps://github.com/rogue-kdc/CVE-2019-1253POC Details
2Nonehttps://github.com/likescam/CVE-2019-1253POC Details
3Poc for CVE-2019-1253https://github.com/padovah4ck/CVE-2019-1253POC Details
4AppXSvc Arbitrary File Security Descriptor Overwrite EoPhttps://github.com/sgabe/CVE-2019-1253POC Details
5Nonehttps://github.com/likekabin/CVE-2019-1253POC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2019-1253

登录查看更多情报信息。

Same Patch Batch · Microsoft · 2019-09-11 · 79 CVEs total

CVE-2019-1260Microsoft SharePoint 安全漏洞
CVE-2019-1261Microsoft SharePoint 跨站请求伪造漏洞
CVE-2019-1231Microsoft Rome SDK 信任管理问题漏洞
CVE-2019-1263Microsoft Excel 信息泄露漏洞
CVE-2019-1264Microsoft Office 输入验证错误漏洞
CVE-2019-1262Microsoft SharePoint 跨站脚本漏洞
CVE-2019-1259Microsoft SharePoint 跨站请求伪造漏洞
CVE-2019-1257Microsoft SharePoint 输入验证错误漏洞
CVE-2019-1256Microsoft Windows和Microsoft Windows Server 安全漏洞
CVE-2019-1254Microsoft Windows Hyper-V 信息泄露漏洞
CVE-2019-1265Microsoft Yammer for Android 输入验证错误漏洞
CVE-2019-1266Microsoft Exchange Server 跨站脚本漏洞
CVE-2019-1267Microsoft Windows Compatibility Appraiser 安全漏洞
CVE-2019-1214Microsoft Windows Common Log File System Driver 安全漏洞
CVE-2019-1215Microsoft Windows和Microsoft Windows Server 安全漏洞
CVE-2019-1216Microsoft DirectX 信息泄露漏洞
CVE-2019-1217Microsoft Edge和ChakraCore 缓冲区错误漏洞
CVE-2019-1219Microsoft Windows Transaction Manager 信息泄露漏洞
CVE-2019-1220Microsoft Internet Explorer和Microsoft Edge 安全漏洞
CVE-2019-1221Microsoft Internet Explorer 缓冲区错误漏洞

Showing top 20 of 79 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2019-1253

No comments yet


Leave a comment