Actively exploited in the wild
Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2022-05-23. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2019-1130
HighCVSS 7.8KEVExploitation Probability (EPSS)
High risk82th percentile - higher than 82% of all known CVEs
Summary
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. An attacker could exploit this to gain elevated privileges on the system.
Risk Assessment
Risk of unauthorized privilege escalation on Windows, potentially leading to full system compromise.
Recommendation
Apply the latest Windows security updates that address this vulnerability.
Original NVD description (English source)
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1129.