CVE Vulnerabilities

CVE-2019-0766

Published: Apr 09, 2019 | Modified: Nov 21, 2024
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

An elevation of privilege vulnerability exists in Windows AppX Deployment Server that allows file creation in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to the system, aka Microsoft Windows Elevation of Privilege Vulnerability.

Affected Software

NameVendorStart VersionEnd Version
Windows_10Microsoft1607 (including)1607 (including)
Windows_10Microsoft1703 (including)1703 (including)
Windows_10Microsoft1709 (including)1709 (including)
Windows_10Microsoft1803 (including)1803 (including)
Windows_10Microsoft1809 (including)1809 (including)
Windows_server_2016Microsoft- (including)- (including)
Windows_server_2016Microsoft1709 (including)1709 (including)
Windows_server_2016Microsoft1803 (including)1803 (including)
Windows_server_2019Microsoft- (including)- (including)

References