Local service interruption via junction-directed deletion

Improper privilege management in Microsoft Windows AppX Deployment Service allows local users to interrupt service through a directory junction. The elevated service follows an attacker-created junction and deletes the redirected directory instead of constraining deletion to the deployment path. Low-privileged code execution is required, and successful exploitation can delete system data and create a denial-of-service condition.