CVE-2019-1385VulnerabilityPublished 05/23/2022Updated 10/24/2026

CVE-2019-1385: Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability

Affects Microsoft WindowsSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 05/23/2022
KEV deadline: 06/13/2022
Ransomware: Used in ransomware campaigns
EPSS: 3.6% chance of exploitation in 30 days – higher than 89% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2019-1385 (opens in a new tab)

Description

CVE-2019-1385 is a privilege escalation vulnerability in Microsoft Windows involving the AppX Deployment Extensions. The vulnerability arises from improper privilege management, allowing unauthorized access to system files. It has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected Windows versions are provided in the available data.

Summary

This vulnerability (CVE-2019-1385) affects Microsoft Windows AppX Deployment Extensions, where improper privilege management allows an attacker to escalate privileges and gain access to system files. The issue is classified under CWE-59 (Improper Link Resolution Before File Access). It has been observed in active exploitation scenarios, including ransomware campaigns. No patch information or affected version details are provided in the input data.

Impact

Successful exploitation of this vulnerability enables attackers to escalate privileges on affected Windows systems, potentially leading to unauthorized access to sensitive system files. This can facilitate further compromise, including deployment of ransomware. The vulnerability has been exploited in the wild, indicating active threat.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, organizations should monitor Microsoft advisories for updates and apply any available security updates promptly once released.

Weaknesses

CWE-59Unclassified weakness (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 11:40:51 UTC

Weaknesses

References

Related threats