Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2019-1130: Windows AppX Deployment Service can let attackers gain admin rights

CVE-2019-1130 · published 7 years ago · actively exploited

Summary

The AppX Deployment Service in Windows 10 versions 1507, 1607, 1703, and 1709 can be tricked into giving a regular user administrator privileges. This could allow a malicious person to take control of the computer and access sensitive data. Install the latest Windows updates to fix the problem.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
microsoft	windows	8.1 for x64-based systems
microsoft	windows_10_1507	All versions `cpe:2.3:o:microsoft:windows_10_1507:-::::::x64:`
microsoft	windows_10_1607	All versions `cpe:2.3:o:microsoft:windows_10_1607:-::::::x64:`
microsoft	windows_10_1703	All versions `cpe:2.3:o:microsoft:windows_10_1703:-::::::x64:`
microsoft	windows_10_1709	All versions `cpe:2.3:o:microsoft:windows_10_1709:-::::::arm64:`
microsoft	windows_10_1803	All versions `cpe:2.3:o:microsoft:windows_10_1803:-::::::arm64:`
microsoft	windows_10_1809	All versions `cpe:2.3:o:microsoft:windows_10_1809:-::::::arm64:`
microsoft	windows_10_1903	All versions `cpe:2.3:o:microsoft:windows_10_1903:-::::::arm64:`
microsoft	windows_8.1	All versions `cpe:2.3:o:microsoft:windows_8.1:-::::::x64:`
microsoft	windows_rt_8.1	All versions `cpe:2.3:o:microsoft:windows_rt_8.1:-:::::::*`
microsoft	windows_server_1803	All versions `cpe:2.3:o:microsoft:windows_server_1803:-::::::x64:`
microsoft	windows_server_1903	All versions `cpe:2.3:o:microsoft:windows_server_1903:-::::::x64:`
microsoft	windows_server_2012	r2 `cpe:2.3:o:microsoft:windows_server_2012:-:::::::*`
microsoft	windows_server_2016	All versions `cpe:2.3:o:microsoft:windows_server_2016:-:::::::*`
microsoft	windows_server_2019	All versions `cpe:2.3:o:microsoft:windows_server_2019:-:::::::*`
microsoft	windows server	2012
microsoft	windows 10 version 1903 for 32-bit systems	unspecified
microsoft	windows 10 version 1903 for x64-based systems	unspecified
microsoft	windows 10 version 1903 for arm64-based systems	unspecified
microsoft	windows server, version 1903 (server core installation)	unspecified

Original advisory text

Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links.

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1130 Patch Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-... US Government Resource

Fix within

Internet-facing 3 days

and check for signs of compromise

Internal 14 days

Known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

7.8 High

Exploitation

Known exploited

Listed in the CISA KEV catalogue - exploitation confirmed in the wild.

2% chance of attack within 30 days

Type

CWE-59Link Following

Timeline

Published15 Jul 2019

Updated3 Nov 2026

First seen6 Mar 2026

Sources

CVE-2019-1130 · CISA KEV

CVE-2019-1130 · NVD

CVE-2019-1130 · MITRE

Track software like this

Free during beta