CVE-2019-1069KEV · OVERDUECWE-59

Microsoft Task Scheduler Privilege Escalation Vulnerability

High · published June 12, 2019

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 93.4th percentile for exploit probability.

1661
days past CISA
deadline
CVSS v3.1
7.8
EPSS
6%
Percentile
93.4
In the wild
Confirmed
What it is

⚡ An attacker with unprivileged code execution can exploit this vulnerability to elevate their privileges — it's like someone sneaking into the VIP lounge and getting full access without a ticket! 🚨 Think of the Task Scheduler Service as a bouncer at a club, who’s supposed to check IDs before letting people in. If they fail to do their job properly, uninvited guests could stroll right in and take over the party! If exploited, this vulnerability could lead to an attacker gaining complete control over a victim system, allowing them to execute any commands they wish. This means they could steal sensitive data, install malware, or even take the system hostage — absolutely devastating!

Put simply

Think of the Task Scheduler Service as a bouncer at a club, who’s supposed to check IDs before letting people in. If they fail to do their job properly, uninvited guests could stroll right in and take over the party! The vulnerability arises from improper validation of file operations by the Task Scheduler Service, allowing unprivileged code to escalate its privileges on the system.

What to do

If exploited, this vulnerability could lead to an attacker gaining complete control over a victim system, allowing them to execute any commands they wish. This means they could steal sensitive data, install malware, or even take the system hostage — absolutely devastating! To protect against this, make sure to apply the latest security updates from Microsoft that address this issue. Regularly audit your systems for unprivileged code execution vulnerabilities and enforce strict user permissions to mitigate potential risks. You've got this! By following these steps, you'll bolster your defenses and keep your systems safe! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.06117 · 93.4th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2019-06-12T18:29Z
KEV added
2022-03-15 · due 2022-04-05
Affected products (11)
ProductVersionsFixed in
microsoft/windows_10_1507all versions—
microsoft/windows_10_1607all versions—
microsoft/windows_10_1703all versions—
microsoft/windows_10_1709all versions—
microsoft/windows_10_1803all versions—
microsoft/windows_10_1809all versions—
microsoft/windows_10_1903all versions—
microsoft/windows_server_1803all versions—
microsoft/windows_server_1903all versions—
microsoft/windows_server_2016all versions—
microsoft/windows_server_2019all versions—
References (5)
EPSS history
Timeline
  • 15 MAR 00:00Z
    Added to CISA KEV — remediate by Apr 5
    kev
  • 12 JUN 13:49Z
    Task Scheduler Elevation of Privilege Vulnerability
    cvelistv5