High severity7.8CISA KEVNVD Advisory· Published Jul 15, 2019· Updated Jun 17, 2026
CVE-2019-1129
CVE-2019-1129
Description
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1130.
Affected products
24cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:x64:*+ 1 more
- cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:arm64:*+ 2 more
- cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:arm64:*
- cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:arm64:*+ 2 more
- cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:arm64:*
- cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*+ 2 more
- cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*
- cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:arm64:*+ 2 more
- cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:arm64:*
- cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:x86:*
- cpe:2.3:o:microsoft:windows_server_1803:-:*:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_server_1903:-:*:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
- Microsoft/Windows 10 Version 1903 for 32-bit Systemsv5Range: unspecified
- Microsoft/Windows 10 Version 1903 for ARM64-based Systemsv5Range: unspecified
- Microsoft/Windows 10 Version 1903 for x64-based Systemsv5Range: unspecified
- Range: version 1803 (Core Installation)
- Microsoft/Windows Server, version 1903 (Server Core installation)v5Range: unspecified
Patches
Vulnerability mechanics
References
2- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1129nvdPatchVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.