← back
CVE-2024-49039

Windows Task Scheduler Elevation of Privilege Vulnerability

CVSS 8.8 HIGHEPSS 13.7%● KEVCWE-287
In short

A flaw in Windows Task Scheduler allows an attacker with limited user account access to gain higher-level system privileges, potentially taking full control of the computer.

Technical detail

An authentication bypass vulnerability in Windows Task Scheduler (CWE-287) permits a low-privileged local attacker to execute arbitrary code with elevated system privileges. The vulnerability requires local access but does not need administrative credentials, enabling privilege escalation through task manipulation.

Summary generated and translated by AI from the official description.
Windows Task Scheduler Elevation of Privilege Vulnerability
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:F/RL:O/RC:C
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →