Vulnerability Details CVE-2019-1476
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1483.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.147
EPSS Ranking 94.2%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 7.2
References
- http://packetstormsecurity.com/files/155653/AppXSvc-17763-Arbitrary-File-Overwrite.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1476
- http://packetstormsecurity.com/files/155653/AppXSvc-17763-Arbitrary-File-Overwrite.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1476
Products affected by CVE-2019-1476
-
cpe:2.3:o:microsoft:windows_10:1607
-
cpe:2.3:o:microsoft:windows_10:1709
-
cpe:2.3:o:microsoft:windows_10:1803
-
cpe:2.3:o:microsoft:windows_10:1809
-
cpe:2.3:o:microsoft:windows_10:1903
-
cpe:2.3:o:microsoft:windows_10:1909
-
cpe:2.3:o:microsoft:windows_server_2016:-
-
cpe:2.3:o:microsoft:windows_server_2016:1803
-
cpe:2.3:o:microsoft:windows_server_2016:1903
-
cpe:2.3:o:microsoft:windows_server_2016:1909
-
cpe:2.3:o:microsoft:windows_server_2019:-