CVE Vulnerabilities

CVE-2019-0766

Published: Apr 09, 2019 | Modified: Jun 17, 2026
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

An elevation of privilege vulnerability exists in Windows AppX Deployment Server that allows file creation in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to the system, aka Microsoft Windows Elevation of Privilege Vulnerability.

Affected Software

NameVendorStart VersionEnd Version
Windows_10Microsoft1607 (including)1607 (including)
Windows_10Microsoft1703 (including)1703 (including)
Windows_10Microsoft1709 (including)1709 (including)
Windows_10Microsoft1803 (including)1803 (including)
Windows_10Microsoft1809 (including)1809 (including)
Windows_server_2016Microsoft- (including)- (including)
Windows_server_2016Microsoft1709 (including)1709 (including)
Windows_server_2016Microsoft1803 (including)1803 (including)
Windows_server_2019Microsoft- (including)- (including)

References