CVE-2024-49039

Summary dbcve.org

Windows Task Scheduler contains an elevation of privilege vulnerability that allows an authenticated attacker to gain SYSTEM-level privileges by exploiting how the Task Scheduler handles task creation or execution. The specific flaw permits a low-privilege user to manipulate scheduled tasks to run with elevated permissions.

Mitigation

Apply the Microsoft security update for CVE-2024-49039 to all affected Windows systems. Additionally, restrict user permissions for creating or modifying scheduled tasks to minimize attack surface until patching is complete.