VDB
GSD-2019-1069
GSD-2019-1069
PUBLISHED
CVSS 7.800000190734863 HIGH
An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system. To exploit the vulnerability, an attacker would require unprivileged code execution on a victim system. The security update addresses the vulnerability by correctly validating file operations.
Risk Scores
CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Windows 10 Version 1809 | 10.0.0, 10.0.17763.0 |
| Microsoft | Windows 10 Version 1903 for ARM64-based Systems | 10.0.0 |
| microsoft | windows_server_1903 | 10.0.0 |
| Microsoft | Windows Server 2019 | 10.0.17763.0 |
| Microsoft | Windows Server 2016 | 10.0.14393.0 |
| Microsoft | Windows 10 Version 1903 for 32-bit Systems | 10.0.0 |
| Microsoft | Windows Server, version 1903 (Server Core installation) | 10.0.0 |
| Microsoft | Windows Server 2016 (Server Core installation) | 10.0.14393.0 |
| Microsoft | Windows 10 Version 1709 | 10.0.0 |
| microsoft | windows_10 | 10.0.0, 10.0.0, 10.0.0 |
| Microsoft | Windows Server, version 1803 (Server Core Installation) | 10.0.0 |
| Microsoft | Windows 10 Version 1507 | 10.0.10240.0 |
| Microsoft | Windows 10 Version 1607 | 10.0.14393.0 |
| microsoft | windows_server_2019 | 10.0.17763.0, 10.0.17763.0 |
| microsoft | windows_10 | 1803, 1703, 1709 |
| Microsoft | Windows 10 Version 1703 | 10.0.0 |
| microsoft | windows_server_1803 | 10.0.0 |
| microsoft | windows_10_1507 | 10.0.10240.0 |
| microsoft | windows_server_2019 | 0 |
| Microsoft | Windows 10 Version 1903 for x64-based Systems | 10.0.0 |
…and 7 more
Exploit Intelligence
- CIRCL exploited: CVE-2019-1069 (circl-sighting)
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1069 (circl)
- https://blog.0patch.com/2019/06/another-task-scheduler-0day-another.html (circl)
- VU#119704 (circl)
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1069 (circl)
- Task Scheduler Elevation of Privilege Vulnerability (circl)
- CIRCL seen: CVE-2019-1069 (circl-sighting)
- CIRCL seen: CVE-2019-1069 (circl-sighting)
- CIRCL seen: CVE-2019-1069 (circl-sighting)
- CIRCL seen: CVE-2019-1069 (circl-sighting)
…and 6 more exploits
Timeline
- May 23, 2019 PoC Published
- Jun 12, 2019 CVE Published
- Oct 9, 2020 PoC Published
- Jan 10, 2021 PoC Published
- Jun 22, 2021 PoC Published
- Jun 14, 2023 PoC Published
- Dec 24, 2024 PoC Published
- Feb 23, 2025 PoC Published
- Aug 31, 2025 PoC Published
- Jan 22, 2026 PoC Published
- Feb 2, 2026 PoC Published
- Apr 15, 2026 Security Advisory
References
- https://blog.0patch.com/2019/06/another-task-scheduler-0day-another.html url
- Task Scheduler Elevation of Privilege Vulnerability advisory
- VU#119704 advisory
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1069 advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1069 advisory