CVE-2019-1069

O que é

An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system.
To exploit the vulnerability, an attacker would require unprivileged code execution on a victim system.
The security update addresses the vulnerability by correctly validating file operations.

CISA: A privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain file operations.

O que fazer

Apply updates per vendor instructions.

Prazo para as agências federais dos EUA: 5 de abril de 2022

• msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1069