EUVD-2019-10033

Malicious code in bioql PyPI...

EUVD-2021-28376

Malicious code in bioql PyPI...

Malicious code in appx-compiler (npm)

The package appx-compiler was found to contain malicious code...

MAL-2025-14746 Malicious code in appx-compiler (npm)

The package appx-compiler was found to contain malicious code...

The vulnerability of the AppX Deployment Service for Microsoft Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the AppX Deployment Service for Microsoft Windows operating systems is related to incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2025-48820

Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally...

CVE-2025-48820

Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally...

CVE-2025-48820

Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally...

CVE-2025-48820 Windows AppX Deployment Service Elevation of Privilege Vulnerability

...

CVE-2025-48820

CVE-2025-48820 affects Windows AppX Deployment Service. It stems from improper link resolution before file access ("link following"), allowing an authenticated local attacker to elevate privileges. CVSS v3.1 score 7.8 (LOCAL, LOW privileges required, high confidentiality/integrity/availability im...

CVE-2025-48820 Windows AppX Deployment Service Elevation of Privilege Vulnerability

...

Windows AppX Deployment Service Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows AppX Deployment Service Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the AppX Deploymen...

PT-2025-28551 · Microsoft · Windows Appx Deployment Server +1

Name of the Vulnerable Software and Affected Versions: Windows AppX Deployment Service affected versions not specified Description: The issue is related to improper link resolution before file access, also known as 'link following', in the Windows AppX Deployment Service. This allows an authorize...

Microsoft Windows AppX Deployment Service 后置链接漏洞

Microsoft Windows AppX Deployment Service is a service in Windows from Microsoft Corporation USA that manages the installation, update and uninstallation of Microsoft Store applications. A backlink vulnerability exists in Microsoft Windows AppX Deployment Service. An attacker could exploit the...

CVE-2025-48820: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally...

CVE-2020-1431

An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate...

CVE-2019-1253

An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from...

CVE-2019-1303

An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from...

CVE-2019-1385

An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate...