CVE-2019-1130
Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability
Published Jul 15, 2019 · updated Aug 11, 2026 · microsoft windows 10 1507
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1129.
Timeline
Detection, updates, and resolution for this record.
Jul 15, 2019 · Catalog
Detected
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1129.
May 23, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Jun 13, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Aug 11, 2026 · Catalog
Updated
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1129.
Required action
Apply updates per vendor instructions.
CISA due date Jun 13, 2022
Affected
- cpe microsoft/windows 10 1507version unspecified
- cpe microsoft/windows 10 1607version unspecified
- cpe microsoft/windows 10 1703version unspecified
- cpe microsoft/windows 10 1709version unspecified
- vendor Microsoft Windowsversion unspecified
Sources
- CISA KEVCVE-2019-1130
A privilege escalation vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links.
cisa.gov - CVE.orgCVE-2019-1130
Official CVE identifier
cve.org - FIRST EPSSCVE-2019-1130
30-day exploitation probability 1.7%
first.org - NIST NVDCVE-2019-1130
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1129.
nvd.nist.gov