[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVB52RcS2EfuaGKLm29FLUmjNAsDrrcXLIIWqZT2fsFA":3,"g5a-risk:CVE-2019-1385":145},{"success":4,"data":5,"meta":143},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":44,"epssPercentile":26,"epssTimeSeries":45,"severity":46,"affectedProducts":47,"affectedProductsCount":68,"references":69,"referencesCount":85,"weaknesses":86,"weaknessesCount":95,"isActivelyExploited":4,"cisaInfo":96,"otxData":26,"relatedBlogPosts":97,"seoMetadata":98,"configurations":123,"relatedVendorCves":141,"notableEvents":142},"CVE-2019-1385","What is CVE-2019-1385?","An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privileges.The security update addresses the vulnerability by correcting how AppX Deployment Extensions manages privileges., aka 'Windows AppX Deployment Extensions Elevation of Privilege Vulnerability'.","An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to s...","2019-11-12T19:15:12.503","2025-04-08T15:43:31.33",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":33,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},[34],{"Source":17,"Type":18,"CVSSData":35,"BaseSeverity":41,"ExploitabilityScore":42,"ImpactScore":43,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":36,"VectorString":37,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":38,"IntegrityImpact":38,"AvailabilityImpact":39,"BaseScore":40,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:C","PARTIAL","COMPLETE",6.1,"MEDIUM",3.9,8.5,0.03604,[44,44,44,44,44,44,44],"High",[48,53,56,59,62,65],{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"microsoft","windows_10_1709","-","cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:*:*",{"vendor":49,"product":54,"version":51,"criteria":55,"vulnerable":4},"windows_10_1803","cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:*:*",{"vendor":49,"product":57,"version":51,"criteria":58,"vulnerable":4},"windows_10_1809","cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:*:*",{"vendor":49,"product":60,"version":51,"criteria":61,"vulnerable":4},"windows_10_1903","cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:*:*",{"vendor":49,"product":63,"version":51,"criteria":64,"vulnerable":4},"windows_server_2016","cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",{"vendor":49,"product":66,"version":51,"criteria":67,"vulnerable":4},"windows_server_2019","cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",6,[70,76,81,83],{"url":71,"source":72,"tags":73},"https:\u002F\u002Fportal.msrc.microsoft.com\u002Fen-US\u002Fsecurity-guidance\u002Fadvisory\u002FCVE-2019-1385","Microsoft",[74,75],"Patch","Vendor Advisory",{"url":77,"source":78,"tags":79},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-19-979\u002F","Zerodayinitiative",[80],"Third Party Advisory",{"url":71,"source":72,"tags":82},[74,75],{"url":77,"source":78,"tags":84},[80],4,[87],{"id":88,"name":89,"description":90,"extendedDescription":91,"status":92,"abstraction":93,"structure":94},"CWE-59","Improper Link Resolution Before File Access ('Link Following')","The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.","","Draft","Base","Simple",1,{"shortDescription":91,"requiredAction":91,"vulnerabilityName":91,"dateAdded":26},[],{"title":99,"metaDescription":100,"keywords":101,"canonicalUrl":102,"structuredData":103},"What is CVE-2019-1385? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-1385, a high severity cyber security vulnerability from 2019. An elevation of privilege vulnerability exists when the Wind...","CVE-2019-1385, CVE-2019-1385 vulnerability, CVE-2019-1385 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, microsoft security, windows_10_1709 vulnerability, windows_10_1803 vulnerability, windows_10_1809 vulnerability, windows_10_1903 vulnerability, windows_server_2016 vulnerability","\u002Fwhat-is\u002Fcve-2019-1385",{"@context":104,"@type":105,"headline":99,"description":100,"datePublished":10,"dateModified":11,"author":106,"publisher":110,"about":114,"mainEntityOfPage":118,"articleSection":121,"keywords":122},"https:\u002F\u002Fschema.org","TechArticle",{"@type":107,"name":108,"url":109},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":107,"name":108,"url":109,"logo":111},{"@type":112,"url":113},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":115,"name":6,"description":116,"additionalType":117},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":119,"@id":120},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-1385","Cybersecurity","CVE-2019-1385, CVE-2019-1385 vulnerability, CVE-2019-1385 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[124],{"Operator":26,"Negate":26,"Nodes":125},[126],{"Operator":127,"Negate":26,"CPEMatch":128},"OR",[129,131,133,135,137,139],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":130,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"AC160B20-3EA0-49A0-A857-4E7A1C2D74E2",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":132,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"00345596-E9E0-4096-8DC6-0212F4747A13",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":134,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"2E332666-2E03-468E-BC30-299816D6E8ED",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":136,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A363CE8F-F399-4B6E-9E7D-349792F95DDB",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":138,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":140,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DB79EE26-FC32-417D-A49C-A1A63165A968",[],[],{"lastModified":11,"cacheTime":144,"version":36},1792252406922,{"score":146,"band":46,"action":147,"scoredAt":148},75,"Emergency patch","2026-10-16T06:47:12.677242+00:00"]