CVE-2019-0766
First published: Tue Apr 09 2019(Updated: )
An elevation of privilege vulnerability exists in Windows AppX Deployment Server that allows file creation in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of Privilege Vulnerability'.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Windows 10 | =1607 | |
| Windows 10 | =1703 | |
| Windows 10 | =1709 | |
| Windows 10 | =1803 | |
| Windows 10 | =1809 | |
| Microsoft Windows Server 2016 | ||
| Microsoft Windows Server 2016 | =1709 | |
| Microsoft Windows Server 2016 | =1803 | |
| Microsoft Windows Server 2019 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2019-0766?
CVE-2019-0766 has been rated as important, indicating that it could allow an attacker to gain elevated privileges on the affected systems.
How do I fix CVE-2019-0766?
To mitigate CVE-2019-0766, apply the latest security updates provided by Microsoft for the affected Windows versions.
What systems are affected by CVE-2019-0766?
CVE-2019-0766 affects multiple versions of Microsoft Windows 10 and Windows Server, specifically versions 1607, 1703, 1709, 1803, 1809, and Windows Server 2016 and 2019.
What type of vulnerability is CVE-2019-0766?
CVE-2019-0766 is classified as an elevation of privilege vulnerability that allows for unauthorized file creation in arbitrary locations.
Can CVE-2019-0766 be exploited remotely?
No, exploitation of CVE-2019-0766 requires local access to the affected system.
- agent/type
- agent/softwarecombine
- agent/severity
- agent/author
- agent/remedy
- agent/description
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/microsoft
- canonical/windows 10
- version/windows 10/1607
- version/windows 10/1703
- version/windows 10/1709
- version/windows 10/1803
- version/windows 10/1809
- canonical/microsoft windows server 2016
- version/microsoft windows server 2016/1709
- version/microsoft windows server 2016/1803
- canonical/microsoft windows server 2019