CVE-2015-2525
HighSummary
Task Scheduler in Windows allows local users to bypass intended filesystem restrictions and delete arbitrary files. This issue affects multiple versions of Windows, including Vista, 7, 8, 10, and Server 2008 and 2012.
Risk Assessment
Exploitation of this vulnerability could lead to unauthorized deletion of critical files, impacting system integrity and data security within the organization.
Recommendation
It is recommended to update operating systems to the latest versions and implement appropriate security policies to restrict local user access to critical system resources.
Other vulnerabilities in Harmonogram zadań (Task Scheduler)
See all- CVE-2016-7222High
Task Scheduler in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allows local users to gain privileges via a crafted UNC pathname in a task.
- CVE-2015-0098High
Task Scheduler in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to gain privileges by triggering application execution by an invalid task, known as 'Task Scheduler Elevation of Privilege Vulnerability.'
Original NVD description (English source)
Task Scheduler in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to bypass intended filesystem restrictions and delete arbitrary files via unspecified vectors, aka "Windows Task File Deletion Elevation of Privilege Vulnerability."