ZeroDay Findings
Sign inSign up

Findings

CVE-2019-1069

Microsoft Task Scheduler Privilege Escalation Vulnerability

Published Jun 12, 2019 · updated Aug 11, 2026 · microsoft windows 10 1507

An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system. To exploit the vulnerability, an attacker would require unprivileged code execution on a victim system. The security update addresses the vulnerability by correctly validating file operations.

Timeline

Detection, updates, and resolution for this record.

  1. Jun 12, 2019 · Catalog

    Detected

    An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system. To exploit the vulnerability, an attacker would require unprivileged code execution on a victim system. The security update addresses the vulnerability by correctly validat

  2. Mar 15, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Apr 5, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Aug 11, 2026 · Catalog

    Updated

    An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system. To exploit the vulnerability, an attacker would require unprivileged code execution on a victim system. The security update addresses the vulnerability by correctly validat

Required action

Apply updates per vendor instructions.

CISA due date Apr 5, 2022

Affected

  • cpe microsoft/windows 10 1507version unspecified
  • cpe microsoft/windows 10 1607version unspecified
  • cpe microsoft/windows 10 1703version unspecified
  • cpe microsoft/windows 10 1709version unspecified
  • cpe microsoft/windows 10 1803version unspecified
  • cpe microsoft/windows 10 1809version unspecified
  • cpe microsoft/windows 10 1903version unspecified
  • cpe microsoft/windows server 1803version unspecified
  • vendor Microsoft Task Schedulerversion unspecified

Sources

  • CISA KEVCVE-2019-1069

    A privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain file operations.

    cisa.gov
  • CVE.orgCVE-2019-1069

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2019-1069

    30-day exploitation probability 6.1%

    first.org
  • NIST NVDCVE-2019-1069

    An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system. To exploit the vulnerability, an attacker would requ

    nvd.nist.gov

References