CVE-2019-1064
KEV · RansomwareMicrosoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
View CVE record →- Vendor / Project
- Microsoft
- Product
- Windows
- Date added
- Mar 15, 2022
- Due date
- Apr 5, 2022
- Known ransomware use
- Known
- CWEs
- CWE-59
Description
A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
Required action
Apply updates per vendor instructions.