CVE-2019-1476
HIGH 7.8EPSS 5.1%
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1483.
- Affected
- Microsoft · Windows 10 Version 1909 for ARM64-based Systems · Windows 10 Version 1909 for 32-bit Systems · Windows 10 Version 1909 for x64-based Systems · Windows Server, version 1909 (Server Core installation) · Windows · Windows Server
- CVSS v3.1 NVD
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 5.09% chance of exploitation in the next 30 days, 92nd percentile
- Published
- 2019-12-10
- Updated
- 2024-08-04
Proof-of-concept exploits (2)
- http://packetstormsecurity.com/files/155653/AppXSvc-17763-Arbitrary-File-Overwrite.html
- sgabe/CVE-2019-14763★ · 2019-12-10