CVE-2019-0841
גבוהה 7.8 מנוצלת בשטח (KEV) בשימוש בכופרה
ניצול פעיל מאומת — קטלוג CISA KEV
- שם
- Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
- נוסף לקטלוג
- יעד טיפול (פדרלי)
- פעולה נדרשת
- Apply updates per vendor instructions.
תיאור (מקור, אנגלית)
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836.
מדדים
- CVSS 3.1
-
7.8 (HIGH)
מקור הציון: NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 41% (אחוזון 100) נכון ל-30/7/2026
- CWE
- CWE-59
מוצרים מושפעים
microsoft: windows 10 1703; microsoft: windows 10 1709; microsoft: windows 10 1803; microsoft: windows 10 1809; microsoft: windows server 2016; microsoft: windows server 2019
קישורים
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0841 PatchVendor Advisory
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0841 PatchVendor Advisory
- http://packetstormsecurity.com/files/153642/AppXSvc-Hard-Link-Privilege-Escala… ExploitThird Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/46683/ ExploitThird Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/153642/AppXSvc-Hard-Link-Privilege-Escala… ExploitThird Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/46683/ ExploitThird Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/152463/Microsoft-Windows-AppX-Deployment-… Third Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/153009/Internet-Explorer-JavaScript-Privi… Third Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/153114/Microsoft-Windows-AppX-Deployment-… Third Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/153215/Microsoft-Windows-AppX-Deployment-… Third Party AdvisoryVDB Entry