CVE-2019-1253

Poc for CVE-2019-1253

CVE-2019-1253 Original Poc sent to MSRC This issue has been fixed with September 2019 "Tuesday" regular update Assigned to CVE-2019-1253 - Windows Elevation of Privilege Vulnerability portalmsrcmicrosoftcom/en-us/security-guidance/advisory/CVE-2019-1253 There are two PoCs: the one that I've originally sent to MSRC is under "AppxExploit_Edge&quo

Windows AppX Deployment - Windows Elevation of Privilege Vulnerability

CVE2019-1253-Compiled Windows AppX Deployment - Windows Elevation of Privilege Vulnerability The “wsappx” process is part of Windows 8 and 10, and you may see it running in the background and it’s related to the Windows Store and Microsoft’s new “Universal” app platform if you see the wsappx process running in your Task Manager, expand it a

AppXSvc Arbitrary File Security Descriptor Overwrite EoP

CVE-2019-1253 AppXSvc Arbitrary File Security Descriptor Overwrite EoP I have independently reported this vulnerability to MSRC, however, my submission turned out to be a duplicate due to the fact that the fix for CVE-2019-1253 also addressed this issue My PoC differs from the ones created by Chris Danieli or Nabeel Ahmed because this exploit gives 'Full Control' ove