CVE-2019-0841

Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

Windows 10 1703

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836.

9. Apr 2019

Ausgewertete Quellen

• Microsoft
  https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0841
• Hinweis
  http://packetstormsecurity.com/files/152463/Microsoft-Windows-AppX-Deployment-Service-Privilege-Escalation.html
• Hinweis
  http://packetstormsecurity.com/files/153009/Internet-Explorer-JavaScript-Privilege-Escalation.html
• Hinweis
  http://packetstormsecurity.com/files/153114/Microsoft-Windows-AppX-Deployment-Service-Local-Privilege-Escalation.html
• Hinweis
  http://packetstormsecurity.com/files/153215/Microsoft-Windows-AppX-Deployment-Service-Local-Privilege-Escalation.html
• Hinweis
  http://packetstormsecurity.com/files/153642/AppXSvc-Hard-Link-Privilege-Escalation.html
• Hinweis
  https://www.exploit-db.com/exploits/46683/
• Hinweis
  https://www.zerodayinitiative.com/advisories/ZDI-19-360/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-0841
• CISA
  Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
• NVD
  CVE-2019-0841