7.8
High
Exploited
· ransomware
CVE-2019-0841 Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply updates per vendor instructions.
Ransomware campaigns
Known to be used
Weakness
CWE-59
Description
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows | Versions not published | |
| Windows Server | 2019 | No fix stated |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
- 46683 www.exploit-db.com
- packetstormsecurity.com packetstormsecurity.com
- www.zerodayinitiative.com www.zerodayinitiative.com
- packetstormsecurity.com packetstormsecurity.com
- packetstormsecurity.com packetstormsecurity.com
- packetstormsecurity.com packetstormsecurity.com
- packetstormsecurity.com packetstormsecurity.com
Timeline
- Published
- Added to the KEV catalogue
- Last modified
Other CVEs of Windows
The 829 CVEs of Windows →
CVE-2025-59033
The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control (WDAC) policy
7.4
High
CVE-2022-50238
The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended…
7.4
High
CVE-2025-9491
Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability
7.0
High
CVE-2022-40733
An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version…
5.0
Medium