CVE-2019-1069

Task Scheduler Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system.To exploit the vulnerability, an attacker would require unprivileged code execution on a victim system.The security update addresses the vulnerability by correctly validating file operations.

Affected

Microsoft · Windows 10 Version 1703 · Windows 10 Version 1803 · Windows Server, version 1803 (Server Core Installation) · Windows 10 Version 1809 · Windows Server 2019 · Windows Server 2019 (Server Core installation)

CVSS v3.1 NVD

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

6.12% chance of exploitation in the next 30 days, 93rd percentile

CISA KEV

added 2022-03-15, used in ransomware campaigns

Published

2019-06-12

Updated

2026-08-12

Proof-of-concept exploits (1)

• https://blog.0patch.com/2019/06/another-task-scheduler-0day-another.html

Security advisories

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1069
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1069
• https://www.kb.cert.org/vuls/id/119704

References

• CVE Record
• NVD entry