370 matches found
CVE-2019-1253
CVE-2019-1253 Original Poc sent to MSRC. This issue has been fixed with September 2019 "Tuesday" regular update. Assigned to CVE-2019-1253 - Windows Elevation of Privilege Vulnerability. https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-1253 There are two PoCs: the one...
CVE-2022-35841
CVE-2022-35841 This is only a small writeup with the theory, as this bug was collided on and I never did get around to properly testing this. EnterpriseAppMgmtSvc is an interesting service implementing COM objects. Seems to date from Windows Phone and indeed, most of the COM interfaces implemente...
AppX Deployment Service Privilege Escalation Data Substitution
The vulnerability of the AppX Deployment Service AppXSVC for Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to replace data...
AppX Deployment Service Disclosure
The vulnerability of the AppX Deployment Service AppXSVC for Windows operating systems stems from operations that occur outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
CVE-2026-85934
Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally...
CVE-2026-85849
Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69979
Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally...
CVE-2026-69969
Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to disclose information locally...
CVE-2026-69945
Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally...
CVE-2026-69905
Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally...
CVE-2026-69914
Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally...
EUVD-2026-99631
Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally...
CVE-2026-85934
A Use after free vulnerability in the Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally . The vulnerability is identified with a CVSSv3.1 score of 7.0, indicating a high severity. No specific remediation details or exploit links are provided in the docume...
CVE-2026-85849
The Windows AppX Deployment Service is vulnerable to an elevation of privilege flaw caused by improper link resolution before file access (link following). This vulnerability allows an authorized attacker to perform local privilege escalation. The CVSS v3.1 score is 7.8 , reflecting high impact o...
EUVD-2026-99553
Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-99130
Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally...
EUVD-2026-99124
Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to disclose information locally...
CVE-2026-69969
The Windows AppX Deployment Service is vulnerable to an information disclosure vulnerability (CVE-2026-69969) due to improper link resolution before file access (link following). An authorized attacker can exploit this flaw to disclose information locally. Exploitation details and specific remedi...
CVE-2026-69979
The Windows AppX Deployment Service is affected by a security feature bypass vulnerability (CVE-2026-69979 ) caused by improper protection of an alternate path . An authorized attacker can exploit this flaw locally to evade security measures. The vulnerability is assigned a CVSS 3.1 score of 5.5 ...