CVE-2019-1129: Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1130.
Other sources
A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
— CISA
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-1129?
CVE-2019-1129 is rated as a critical vulnerability due to its potential for elevation of privilege in affected Windows operating systems.
How do I fix CVE-2019-1129?
To fix CVE-2019-1129, install the latest security updates provided by Microsoft for your version of Windows.
What versions of Windows are affected by CVE-2019-1129?
CVE-2019-1129 affects several Windows 10 versions including 1703, 1709, 1803, 1809, and 1903, as well as Windows Server versions 2016 and 2019.
What is the impact of exploiting CVE-2019-1129?
Exploiting CVE-2019-1129 can allow an attacker to gain elevated privileges on the impacted system.
Is there a workaround for CVE-2019-1129?
There are currently no recommended workarounds for CVE-2019-1129, so applying updates is the best course of action.