CVE Catalog
Actively exploited in the wild
Microsoft Windows Task Scheduler Privilege Escalation Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2024-11-12. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2024-49039
HighCVSS 8.8KEVExploitation Probability (EPSS)
Very high risk13.72%
96th percentile - higher than 96% of all known CVEs
Summary
Windows Task Scheduler Elevation of Privilege Vulnerability.
Risk Assessment
The risk includes the possibility of an attacker gaining higher privileges, which could lead to full system compromise.
Recommendation
It is recommended to apply Microsoft patches and monitor systems for unauthorized changes to the task scheduler.
Original NVD description (English source)
Windows Task Scheduler Elevation of Privilege Vulnerability