EXPOSURES › CVE-2019-1064
CVE-2019-1064
CRITICAL ⌖ ON CISA KEV · EXPLOITEDA Microsoft Windows vulnerability allowed attackers to escalate privileges, actively exploited and linked to ransomware campaigns.
CVE-2019-1064, a privilege escalation vulnerability in the Windows AppXSVC, enabled attackers to execute code with elevated permissions. This is concerning for DIB organizations as it could lead to unauthorized access and data compromise, impacting NIST 800-171 compliance requirements for privilege management and incident response. Ensure systems are patched and review access controls.
Shame score — The vulnerability's exploitation in active ransomware campaigns highlights a significant failure in Microsoft's security practices and a delayed response to a critical issue.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |