CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2019-10647.8/HIGHEPSS 6.9%CISA KEV
2019-06-12

Windows AppX Deployment Service (AppXSVC) Hard Link Elevation of Privilege Vulnerability (CVE-2019-1064)

[Affected Scope] Microsoft Windows operating systems, including Windows 10 and Windows Server 2016/2019, utilizing the AppX Deployment Service (AppXSVC)

[Impact] Local authenticated attackers can execute specially crafted applications to run arbitrary processes in an elevated SYSTEM context, leading to full system compromise

[Mitigation] Apply the official cumulative security updates provided by Microsoft and restrict local interactive logon privileges for unauthorized users

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse