Description
An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system.
To exploit the vulnerability, an attacker would require unprivileged code execution on a victim system.
The security update addresses the vulnerability by correctly validating file operations.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Windows 10 Version 1703 | 10.0.0 – < publication | publication |
| Microsoft | Windows 10 Version 1803 | 10.0.0 – < publication | publication |
| Microsoft | Windows Server, version 1803 (Server Core Installation) | 10.0.0 – < publication | publication |
| Microsoft | Windows 10 Version 1809 | 10.0.17763.0 – < publication, 10.0.0 – < publication | publication |
| Microsoft | Windows Server 2019 | 10.0.17763.0 – < publication | publication |
| Microsoft | Windows Server 2019 (Server Core installation) | 10.0.17763.0 – < publication | publication |
| Microsoft | Windows 10 Version 1709 for 32-bit Systems | 10.0.0 – < publication | publication |
| Microsoft | Windows 10 Version 1709 | 10.0.0 – < publication | publication |
| Microsoft | Windows 10 Version 1903 for 32-bit Systems | 10.0.0 – < publication | publication |
| Microsoft | Windows 10 Version 1903 for x64-based Systems | 10.0.0 – < publication | publication |
| Microsoft | Windows 10 Version 1903 for ARM64-based Systems | 10.0.0 – < publication | publication |
| Microsoft | Windows Server, version 1903 (Server Core installation) | 10.0.0 – < publication | publication |
| Microsoft | Windows 10 Version 1507 | 10.0.10240.0 – < publication | publication |
| Microsoft | Windows 10 Version 1607 | 10.0.14393.0 – < publication | publication |
| Microsoft | Windows Server 2016 | 10.0.14393.0 – < publication | publication |
| Microsoft | Windows Server 2016 (Server Core installation) | 10.0.14393.0 – < publication | publication |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 1 repository
-
S3cur3Th1sSh1t/SharpPolarBear ★ 37 · Jun 3, 2019
Privesc through import of Sheduled tasks + Hardlinks - CVE-2019-1069
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- Task Scheduler Elevation of Privilege Vulnerability vendor-advisory