CVE-2019-0841
KEV RANSOMWAREHIGH 7.8EPSS 41.4%
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836.
- CVSS v3.1
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v3.1
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0
- 7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 41.40% chance of exploitation in the next 30 days, 99th percentile
- CISA KEV
- added 2022-03-15, used in ransomware campaigns
- Published
- 2019-04-09
- Updated
- 2025-10-21
Proof-of-concept exploits (7)
- http://packetstormsecurity.com/files/153642/AppXSvc-Hard-Link-Privilege-Escalation.html
- 0x00-0x00/CVE-2019-0841-BYPASS58★ · 2019-06-11
- comgongi/auto-aim5★ · 2024-09-10
- likekabin/CVE-2019-08412★ · 2019-04-10
- likescam/CVE-2019-08412★ · 2019-04-10
- mappl3/CVE-2019-08410★ · 2022-04-09
- rogue-kdc/CVE-2019-0841239★ · 2019-04-09
Metasploit modules (1)
ExploitDB entries (4)
- https://www.exploit-db.com/exploits/47128
- https://www.exploit-db.com/exploits/46976
- https://www.exploit-db.com/exploits/46938
- https://www.exploit-db.com/exploits/46683