CVE-2019-1270

—

CVSS 3.1

5.5 medium

EPSS

<1%p57

Published

Sep 11, 2019 (Sep 11, 2019)

Modified

Jun 17, 2026

Description

An elevation of privilege vulnerability exists in Windows store installer where WindowsApps directory is vulnerable to symbolic link attack, aka 'Microsoft Windows Store Installer Elevation of Privilege Vulnerability'.

Vendors: microsoft
Products: windows 10, windows server 2016, windows server 2019
Weakness: CWE-59
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.