CISA Known Exploited Vulnerability

CVE-2019-1385 Ransomware

Microsoft · Windows

Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability

Date added
BOD 22-01 due date
CWE CWE-59
Ransomware Known

CISA description

A privilege escalation vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.

Required action

Apply updates per vendor instructions.