EXPOSURES › CVE-2019-1130
CVE-2019-1130
CRITICAL ⌖ ON CISA KEV · EXPLOITEDA Microsoft Windows vulnerability allowed privilege escalation via improper hard link handling, actively exploited in ransomware attacks.
CVE-2019-1130 in the Windows AppX Deployment Service (AppXSVC) enabled privilege escalation, and is currently being exploited in the wild, including by ransomware. DIB organizations using vulnerable Windows systems face increased risk of unauthorized access and data compromise, impacting NIST 800-171 compliance; immediate patching is required.
Shame score — The vulnerability's active exploitation by ransomware demonstrates a significant and avoidable security lapse in a core operating system component.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
A privilege escalation vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |