CVE-2019-1267

CVE-2019-1267 is an elevation of privilege vulnerability in Microsoft Compatibility Appraiser, affecting various Windows versions including Windows 10, 8.1, and Server editions. This vulnerability stems from a configuration file susceptible to symbolic and hard link attacks. With a CVSS score of 7.8 (High), it allows a local attacker with low privileges to achieve high impact on confidentiality, integrity, and availability with low attack complexity. While no public exploit code (Metasploit, Nuclei, ExploitDB) is available and it's not listed in CISA's KEV catalog, there has been some community discussion and media coverage, indicating awareness of the flaw.