VDB

GSD-2019-1130

GSD-2019-1130 PUBLISHED CVSS 7.800000190734863 HIGH

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1129.

Risk Scores

CVSS v3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
MicrosoftWindows 10 Version 1903 for ARM64-based Systemsunspecified
MicrosoftWindows8.1 for x64-based systems, 10 for 32-bit Systems, 10 for x64-based Systems
MicrosoftWindows Server*, 2012, 2012 (Core installation)
MicrosoftWindows 10 Version 1903 for 32-bit Systemsunspecified
MicrosoftWindows Server, version 1903 (Server Core installation)unspecified
MicrosoftWindows 10 Version 1903 for x64-based Systemsunspecified

Timeline

  • Jul 10, 2019 CVE Published
  • Jun 14, 2023 PoC Published
  • Dec 24, 2024 PoC Published
  • Jan 15, 2025 PoC Published
  • Feb 23, 2025 PoC Published
  • Feb 2, 2026 PoC Published
  • Apr 14, 2026 Security Advisory
Open in Interactive Console →
$ Console Community · 100/wk Open console ›