coldbraid

CVE-2024-49039 Microsoft Windows

Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided, local application to escalate privileges outside of its AppContainer, and access privileged RPC functions.

CVSS
not scored

CWE-287

On CISA’s exploited list

Microsoft Windows Task Scheduler Privilege Escalation Vulnerability

Added
2024-11-12
Federal patch deadline
2024-12-03
Ransomware use
known