An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privileges.The security update addresses the vulnerability by correcting how AppX Deployment Extensions manages privileges., aka 'Windows AppX Deployment Extensions Elevation of Privilege Vulnerability'.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Msft | microsoft-windows-windows_10-1803-kb4565489microsoft-windows-windows_10-1809-kb4558998microsoft-windows-windows_10-1903-kb4565483microsoft-windows-windows_10-1909-kb4565483microsoft-windows-windows_10-2004-kb4565503microsoft-windows-windows_server_2019-1809-kb4558998msft-kb4565483-3953c76a-16d0-4028-977a-0a5108a8c373msft-kb4565483-b3f51921-6afd-4c38-8092-51c1be956806msft-kb4565503-9f4ad806-f4a9-4868-b9a2-900b0a123d96 | Jul 14, 2020 | Jul 14, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub