An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system.
To exploit the vulnerability, an attacker would require unprivileged code execution on a victim system.
The security update addresses the vulnerability by correctly validating file operations.
References
| Link | Resource |
|---|---|
| https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1069 | Patch Vendor Advisory |
| https://blog.0patch.com/2019/06/another-task-scheduler-0day-another.html | Exploit Third Party Advisory |
| https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1069 | Patch Vendor Advisory |
| https://www.kb.cert.org/vuls/id/119704 | Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
|
History
21 May 2025, 18:33
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system. To exploit the vulnerability, an attacker would require unprivileged code execution on a victim system. The security update addresses the vulnerability by correctly validating file operations. | |
| References |
|
Information
Published : 2019-06-12 14:29
Updated : 2025-05-21 18:33
NVD link : CVE-2019-1069
Mitre link : CVE-2019-1069
CVE.ORG link : CVE-2019-1069
JSON object : View
Products Affected
microsoft
- windows_10_1607
- windows_server_2016
- windows_10_1709
- windows_10_1809
- windows_server_1803
- windows_10_1703
- windows_10_1903
- windows_server_2019
- windows_10_1507
- windows_10_1803
- windows_server_1903
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')