← Back to CVE List
Vulnerability Analysis
Task Scheduler Elevation of Privilege Vulnerability

CVE-2019-1069

An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system. To exploit the vulnerability, an attacker would require unprivileged code execution on a victim system. The security update addresses the vulnerability by correctly validating file operations.

CISA KEV SSVC: Active Exploitation
CVSS Base Score
7.8
HIGH
Exploitability:1.9
Impact Score:5.9
Temporal Score:-
EPSS:6.12%

Threat Intelligence Signals

CISA KEV
YES
KEV Date Added
2022-03-15
Ransomware Use
Known
KEV Due Date
2022-04-05
VulnCheck In-the-Wild
No
Nuclei Template
No
EPSS Score
6.117%
EPSS Percentile
92.8th pct
GitHub Severity
HIGH
SSVC Exploitation
Active
SSVC Automatable
No
Vulnerability Class

Identity & Timeline

Status-
Assigning Authority-
CVSS Version / Source-
Reserved-
Published-
Patch Date (date_public)-
Exploit DB Date-
First GitHub PoC Date-
Last Updated-
Time to Patch (Days to fix)-
Exploit Release Gap-
PoC Release Gap-
Exploit DB ReferencesNone identified

Affected Products & Versions

Vendor Product Affected Versions
No affected products specified.

References

No reference links found.

LINK COPIED TO CLIPBOARD