CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2019-11297.8/HIGHEPSS 1.8%CISA KEV
2019-07-15

Windows AppX Deployment Service (AppXSVC) Elevation of Privilege Vulnerability via Hard Link Mismanagement (CVE-2019-1129)

[Affected Scope] Microsoft Windows operating systems utilizing the AppX Deployment Service (AppXSVC), including Windows 10 and Windows Server 2016/2019

[Impact] An attacker with local user access can exploit the vulnerability to run arbitrary code with SYSTEM privileges, leading to complete system compromise

[Mitigation] Apply the official cumulative security updates provided by Microsoft and restrict local user privileges

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse