high7.8Public exploit code
CVE-2019-1476
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privileg…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- AppXSvc 17763 - Arbitrary File Overwrite (DoS)2019-12-11 · dos · windows
Impact
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1483.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 10 | Versions 1607, 1709, 1803, 1809, 1903, 1909 |
| Microsoft | Windows Server 2016 | All versions Versions 1803, 1903, 1909 |
| Microsoft | Windows Server 2019 | All versions |
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/155653/AppXSvc-17763-Arbitrary-File-Overwrite.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1476
- http://packetstormsecurity.com/files/155653/AppXSvc-17763-Arbitrary-File-Overwrite.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1476