VULNERABILITY INTELLIGENCE

CVE-2019-1270

CVSS score5.5 MEDIUM
EPSS probability0.90%
CISA KEVNot currently listed
Published2019-09-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Description

An elevation of privilege vulnerability exists in Windows store installer where WindowsApps directory is vulnerable to symbolic link attack, aka 'Microsoft Windows Store Installer Elevation of Privilege Vulnerability'.

Weakness classification

  • CWE-59: Improper Link Resolution Before File Access ('Link Following')

Primary references