Lucene search

MicrosoftCVE-2019-0841

HistoryApr 09, 2019 - 9:29 p.m.

CVE-2019-0841

2019-04-0921:29:01

CWE-59

microsoft

web.nvd.nist.gov

1091

In Wild

cve

2019

0841

windows

appx deployment service

appxsvc

elevation of privilege

vulnerability

nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

High

EPSS

0.866

Percentile

98.6%

JSON

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka ‘Windows Elevation of Privilege Vulnerability’. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836.

Affected configurations

Nvd

Vulners

Node

microsoftwindows_10_1703

microsoftwindows_10_1709

microsoftwindows_10_1803

microsoftwindows_10_1809

microsoftwindows_server_2016Match1803

microsoftwindows_server_2019Match-

VendorProductVersionCPE
microsoftwindows_10_1703*cpe:2.3:o:microsoft:windows_10_1703:*:*:*:*:*:*:*:*
microsoftwindows_10_1709*cpe:2.3:o:microsoft:windows_10_1709:*:*:*:*:*:*:*:*
microsoftwindows_10_1803*cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:*:*
microsoftwindows_10_1809*cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*
microsoftwindows_server_20161803cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*
microsoftwindows_server_2019-cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_10_1703	*	cpe:2.3:o:microsoft:windows_10_1703::::::::
microsoft	windows_10_1709	*	cpe:2.3:o:microsoft:windows_10_1709::::::::
microsoft	windows_10_1803	*	cpe:2.3:o:microsoft:windows_10_1803::::::::
microsoft	windows_10_1809	*	cpe:2.3:o:microsoft:windows_10_1809::::::::
microsoft	windows_server_2016	1803	cpe:2.3:o:microsoft:windows_server_2016:1803:::::::*
microsoft	windows_server_2019	-	cpe:2.3:o:microsoft:windows_server_2019:-:::::::*

CNA Affected

[
  {
    "product": "Windows",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "10 Version 1703 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "10 Version 1703 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "10 Version 1709 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "10 Version 1709 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "10 Version 1803 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "10 Version 1803 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "10 Version 1803 for ARM64-based Systems"
      },
      {
        "status": "affected",
        "version": "10 Version 1809 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "10 Version 1809 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "10 Version 1809 for ARM64-based Systems"
      },
      {
        "status": "affected",
        "version": "10 Version 1709 for ARM64-based Systems"
      }
    ]
  },
  {
    "product": "Windows Server",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "version 1709  (Core Installation)"
      },
      {
        "status": "affected",
        "version": "version 1803  (Core Installation)"
      },
      {
        "status": "affected",
        "version": "2019"
      },
      {
        "status": "affected",
        "version": "2019  (Core installation)"
      }
    ]
  }
]