Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
Microsoft · Windows
Date added (CISA)
2022-03-15
Remediation due
2022-04-05
Known ransomware use
Yes
Remediation priority
P1 — known ransomware use · past CISA due date
Description
A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.