CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2019-11307.8/HIGHEPSS 1.7%CISA KEV
2019-07-15

Windows AppX Deployment Service (AppXSVC) Hard Link Improper Handling Local Elevation of Privilege Vulnerability (CVE-2019-1130)

[Affected Scope] Microsoft Windows operating systems, including Windows 10 and Windows Server 2016/2019, utilizing the AppX Deployment Service (AppXSVC)

[Impact] A local attacker can execute arbitrary code with SYSTEM privileges by running a specially crafted application, leading to complete system compromise

[Mitigation] Apply the official cumulative security updates provided by Microsoft to correct the file system link handling logic within AppXSVC

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse