CVE-2019-1340

An elevation of privilege vulnerability exists in Windows AppX Deployment Server that allows file creation in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1320, CVE-2019-1322.

Published : 2019-10-10 14:15 Updated : 2019-10-15 19:57

7.2
CVSS Score More info
Score 7.2 / 10
7.2
Vendor Product Version URI
Microsoft Windows 10 1703 cpe:/o:microsoft:windows_10:1703
Microsoft Windows 10 1709 cpe:/o:microsoft:windows_10:1709
Microsoft Windows 10 1803 cpe:/o:microsoft:windows_10:1803
Microsoft Windows 10 1809 cpe:/o:microsoft:windows_10:1809
Microsoft Windows 10 1903 cpe:/o:microsoft:windows_10:1903
Microsoft Windows Server 2016 1803 cpe:/o:microsoft:windows_server_2016:1803
Microsoft Windows Server 2016 1903 cpe:/o:microsoft:windows_server_2016:1903
Microsoft Windows Server 2019 - cpe:/o:microsoft:windows_server_2019:-
  1. Microsoft (3) Search CVE
    1. Windows Server 2019 (1) Search CVE
      1. -
    2. Windows Server 2016 (2) Search CVE
      1. 1803
      2. 1903
    3. Windows 10 (5) Search CVE
      1. 1703
      2. 1709
      3. 1803
      4. 1809
      5. 1903

CWE

ID Name Description Links
CWE-269 Improper Privilege Management The software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. CVE

History of changes

Date Event
2019-10-15 19:57
2019-10-10 14:19

New CVE