CVE-2019-0841
Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
CVSS
—
No CVSS
EPSS
41.4%
p99
KEV
YES
Mar 15, 2022
Exploit Today
80
0-100
Published: — · Last modified: —
41.4%EPSS · 30 days41.4%
2026-09-172026-10-15
Product
Microsoft / Windows
Vulnerability
Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
Added to KEV
Mar 15, 2022
Remediate by
Apr 5, 2022
Known ransomware use
Yes
Summary description
A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2019-0841
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-969518.8 HIG74.0%
KEV—72Microsoft Windows Command Injection Vulnerability10hCVE-2026-858807.8 HIG89.3%
KEV—77Microsoft Windows Heap-Based Buffer Overflow Vulnerability22dCVE-2026-819637.8 HIG31.9%
KEV—60Microsoft Windows Link Following Vulnerability37dCVE-2026-322024.3 MED92.0%
KEV—78Microsoft Windows Protection Mechanism Failure Vulnerability63dCVE-2026-208055.5 MED94.4%
KEV—78Microsoft Windows Information Disclosure Vulnerability78dCVE-2025-622217.8 HIG84.4%
KEV—75Microsoft Windows Use After Free Vulnerability21d