CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows AppX Deployment Service (AppXSVC) Hard Link Improper Handling Local Elevation of Privilege Vulnerability (CVE-2019-1130)
[Affected Scope] Microsoft Windows operating systems, including Windows 10 and Windows Server 2016/2019, utilizing the AppX Deployment Service (AppXSVC)
[Impact] A local attacker can execute arbitrary code with SYSTEM privileges by running a specially crafted application, leading to complete system compromise
[Mitigation] Apply the official cumulative security updates provided by Microsoft to correct the file system link handling logic within AppXSVC
Windows AppX Deployment Service (AppXSVC) Elevation of Privilege Vulnerability via Hard Link Mismanagement (CVE-2019-1129)
[Affected Scope] Microsoft Windows operating systems utilizing the AppX Deployment Service (AppXSVC), including Windows 10 and Windows Server 2016/2019
[Impact] An attacker with local user access can exploit the vulnerability to run arbitrary code with SYSTEM privileges, leading to complete system compromise
[Mitigation] Apply the official cumulative security updates provided by Microsoft and restrict local user privileges
Windows AppX Deployment Service (AppXSVC) Hard Link Elevation of Privilege Vulnerability (CVE-2019-1064)
[Affected Scope] Microsoft Windows operating systems, including Windows 10 and Windows Server 2016/2019, utilizing the AppX Deployment Service (AppXSVC)
[Impact] Local authenticated attackers can execute specially crafted applications to run arbitrary processes in an elevated SYSTEM context, leading to full system compromise
[Mitigation] Apply the official cumulative security updates provided by Microsoft and restrict local interactive logon privileges for unauthorized users
Windows AppX Deployment Service (AppXSVC) Hard Link Elevation of Privilege Vulnerability (CVE-2019-0841)
[Affected Scope] Microsoft Windows operating systems utilizing the AppX Deployment Service (AppXSVC), including Windows 10 and Windows Server 2016/2019
[Impact] Local authenticated attackers can exploit improper hard link handling to modify system file permissions and escalate privileges to NT AUTHORITY\SYSTEM
[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict unauthorized local interactive logons