⚠ Actively exploited in ransomware campaigns

This vulnerability is on the CISA Known Exploited Vulnerabilities list and has been used in known ransomware attacks. CISA required action: Apply updates per vendor instructions.. Due date: 2022-06-13.

CVE-2019-1130

6 documents6 sources

7.8

CVSS

HIGH

EPSS1.9%(83th)

CISA KEVExploited in WildRansomware Use

CISA Required Action: Apply updates per vendor instructions.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages6 packages

▶CVEListV5microsoft/windows17 versions+16

▶NVDmicrosoft/windowsr2

▶CVEListV5microsoft/windows_server9 versions+8

▶CVEListV5microsoft/windows_10_version_1903_for_32-bit_systemsunspecified

▶CVEListV5microsoft/windows_10_version_1903_for_x64-based_systemsunspecified

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1129.

NVD ↗MITRE ↗Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

GHSA

GHSA-gxfx-4m5q-qcqf: An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of↗2022-05-24

▶

CVEList

CVE-2019-1130: An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of↗2019-07-29

▶

VulnCheck

Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability↗2019

▶

📋Vendor Advisories

CISA

Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability↗2022-05-23

▶

Microsoft

Windows Elevation of Privilege Vulnerability↗2019-07-09

▶