CVE-2019-0841KEV · OVERDUE

Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

High · published April 9, 2019

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 98.7th percentile for exploit probability.

1662
days past CISA
deadline
CVSS v3.1
7.8
EPSS
41%
Percentile
98.7
In the wild
Confirmed
What it is

⚡ An elevation of privilege vulnerability lurks within the Windows AppX Deployment Service, allowing attackers to misuse hard links with just the right touch! 🔥 Think of it like a sneaky hotel guest who gains access to the penthouse suite by pretending to have a special key—easy to pull off if no one is checking the credentials. This vulnerability lets attackers elevate their privileges without the usual security checks! An attacker could exploit this vulnerability to run malicious code with elevated permissions, potentially compromising the entire system! Imagine someone bypassing all the security protocols and having free rein to modify critical system files, steal sensitive information, or install harmful software—all while looking like a trusted guest!

Put simply

Think of it like a sneaky hotel guest who gains access to the penthouse suite by pretending to have a special key—easy to pull off if no one is checking the credentials. This vulnerability lets attackers elevate their privileges without the usual security checks! This vulnerability arises because the AppXSVC does not properly handle hard links, allowing an attacker to create links that can be used to escalate privileges, gaining unauthorized access to sensitive system functions or resources.

What to do

An attacker could exploit this vulnerability to run malicious code with elevated permissions, potentially compromising the entire system! Imagine someone bypassing all the security protocols and having free rein to modify critical system files, steal sensitive information, or install harmful software—all while looking like a trusted guest! To protect your system, ensure you're running the latest Windows updates that include patches for this vulnerability. Verify your security settings and consider implementing strict privilege management policies to limit user access. Don't wait—address this high-risk issue ASAP! You've got this! By taking these steps, you'll help keep your systems safe and sound! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.41400 · 98.7th percentile
Published
2019-04-09T20:18Z
KEV added
2022-03-15 · due 2022-04-05
EPSS history
Timeline
  • 15 MAR 00:00Z
    Added to CISA KEV — remediate by Apr 5
    kev
  • 09 APR 20:18Z
    An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of…
    cvelistv5