01642 06 11 11 Arrange Call

Symbolic Link and Hard Link Vulnerability in Microsoft Compatibility Appraiser

CVE-2019-1267 · HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2019-1267

An elevation of privilege vulnerability exists in Microsoft Compatibility Appraiser where a configuration file, with local privileges, is vulnerable to symbolic link and hard link attacks, aka 'Microsoft Compatibility Appraiser Elevation of Privilege Vulnerability'.

Learn more about our Web Application Penetration Testing UK.