CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows Error Reporting (WER) Hard Link Elevation of Privilege Vulnerability (CVE-2019-1315)
[Affected Scope] Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019 with Windows Error Reporting (WER) enabled
[Impact] A local attacker can exploit hard links to overwrite or manipulate arbitrary system files, leading to arbitrary code execution with SYSTEM privileges
[Mitigation] Immediately apply the official Microsoft security patches and restrict local write permissions on temporary directories prior to patching
Windows AppX Deployment Service (AppXSVC) Hard Link Improper Handling Local Elevation of Privilege Vulnerability (CVE-2019-1130)
[Affected Scope] Microsoft Windows operating systems, including Windows 10 and Windows Server 2016/2019, utilizing the AppX Deployment Service (AppXSVC)
[Impact] A local attacker can execute arbitrary code with SYSTEM privileges by running a specially crafted application, leading to complete system compromise
[Mitigation] Apply the official cumulative security updates provided by Microsoft to correct the file system link handling logic within AppXSVC
Windows AppX Deployment Service (AppXSVC) Elevation of Privilege Vulnerability via Hard Link Mismanagement (CVE-2019-1129)
[Affected Scope] Microsoft Windows operating systems utilizing the AppX Deployment Service (AppXSVC), including Windows 10 and Windows Server 2016/2019
[Impact] An attacker with local user access can exploit the vulnerability to run arbitrary code with SYSTEM privileges, leading to complete system compromise
[Mitigation] Apply the official cumulative security updates provided by Microsoft and restrict local user privileges
Microsoft Windows Task Scheduler Elevation of Privilege Vulnerability (CVE-2019-1069) Technical Advisory
[Affected Scope] Microsoft Windows operating systems including Windows 10 and Windows Server 2016/2019 with active Task Scheduler services
[Impact] Local authenticated attackers can bypass file operation validations via hard links to execute arbitrary code with SYSTEM privileges
[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict write permissions on Task Scheduler directories
Windows AppX Deployment Service (AppXSVC) Hard Link Elevation of Privilege Vulnerability (CVE-2019-0841)
[Affected Scope] Microsoft Windows operating systems utilizing the AppX Deployment Service (AppXSVC), including Windows 10 and Windows Server 2016/2019
[Impact] Local authenticated attackers can exploit improper hard link handling to modify system file permissions and escalate privileges to NT AUTHORITY\SYSTEM
[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict unauthorized local interactive logons