Actively exploited in the wild
Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2022-03-15. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2019-0841
HighCVSS 7.8KEVSummary
An elevation of privilege vulnerability in Windows AppX Deployment Service (AppXSVC), due to improper handling of hard links. A local attacker could exploit this to gain elevated privileges.
Risk Assessment
An attacker with local access could gain higher privileges, potentially leading to full system compromise.
Recommendation
Apply Windows security updates to fix this vulnerability.
Other vulnerabilities in Windows AppX Deployment Service
See all- CVE-2019-1130HighActively exploited
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. An attacker could exploit this to gain elevated privileges on the system.
- CVE-2019-1129HighActively exploited
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1130.
- CVE-2019-1064HighActively exploited
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context, then install programs; view, change or delete data. To exploit, the attacker must first log on to the system and run a specially crafted application. The security update addresses the vulnerability by correcting how AppXSVC handles hard links.
- CVE-2026-49803High
A race condition in the Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836.