CVE-2019-1129

A flaw in Windows AppX Deployment Service allows an attacker to gain higher privileges on the system by exploiting improper handling of hard links. This is dangerous because it lets someone bypass security restrictions and gain administrator-level access.

The vulnerability exists in AppXSVC's hard link handling mechanism, allowing an attacker with local access to create specially crafted hard links that the service processes with elevated privileges. Exploitation requires local system access and results in privilege escalation to SYSTEM or administrator context.