Actively exploited in the wild
Microsoft Windows Task Scheduler Privilege Escalation Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2024-11-12. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2024-49039
HighCVSS 8.8KEVExploitation Probability (EPSS)
Very high risk96th percentile - higher than 96% of all known CVEs
Summary
Windows Task Scheduler Elevation of Privilege Vulnerability.
Risk Assessment
The risk includes the possibility of an attacker gaining higher privileges, which could lead to full system compromise.
Recommendation
It is recommended to apply Microsoft patches and monitor systems for unauthorized changes to the task scheduler.
Other vulnerabilities in Windows Task Scheduler
See all- CVE-2019-1069HighActively exploited
An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system. To exploit, the attacker would require unprivileged code execution on the victim system.
- CVE-2026-72945Medium
Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Windows Task Scheduler Elevation of Privilege Vulnerability