Vuln: Microsoft Windows AppX Deployment Service Incomplete Fix Local Privilege Escalation Vulnerability

Microsoft Windows is prone to a local privilege-escalation vulnerability.

A local attacker can exploit this issue to run processes with elevated privileges.

exploit

The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.

solution

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: vuldb@securityfocus.com.

info

Bugtraq ID:	108696
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Jun 07 2019 12:00AM
Updated:	Jun 07 2019 12:00AM
Credit:	SandboxEscaper
Vulnerable:	Microsoft Windows 0
Not Vulnerable:

references

References:

• Hacker Discloses Second Zero-Day to Bypass Patch for Windows EoP Flaw (Hackernews)
  
• Microsoft Homepage (Microsoft)
  

from SecurityFocus Vulnerabilities http://bit.ly/2ZaaxvA