← Vulnerability Intelligence

CVE-2019-0841

High 7.8 Exploited in the wild (KEV) Used in ransomware campaigns

Confirmed active exploitation — CISA KEV catalog

Name
Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
Added to catalog
Remediation due date (US federal)
Required action
Apply updates per vendor instructions.

Description

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836.

Metrics

CVSS 3.1
7.8 (HIGH) Score source: NVD CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS — exploit probability
41% (percentile: 99) as of 2 November 2026
CWE
CWE-59

Affected products

microsoft: windows 10 1703; microsoft: windows 10 1709; microsoft: windows 10 1803; microsoft: windows 10 1809; microsoft: windows server 2016; microsoft: windows server 2019

References