CVE-2019-1069
HIGH KEV RANSOMWAREWindows 10 and Windows Server - Elevation of Privilege via Task Scheduler File Operation Validation
Title source: llmExploitation Summary
CVE-2019-1069 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added March 15, 2022, with confirmed use in ransomware campaigns. EIP tracks 2 public exploits from researchers including S3cur3Th1sSh1t, k44sh.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2019-1069, which targets a vulnerability in the Windows Task Scheduler. The exploit involves loading a malicious DLL to achieve privilege escalation.
Description
An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system. To exploit the vulnerability, an attacker would require unprivileged code execution on a victim system. The security update addresses the vulnerability by correctly validating file operations.
Exploits (2)
This repository contains a functional exploit for CVE-2019-1069, which targets a vulnerability in the Windows Task Scheduler. The exploit involves loading a malicious DLL to achieve privilege escalation.
This repository contains a functional exploit for CVE-2019-1069, a local privilege escalation vulnerability in Windows Task Scheduler. The exploit leverages a flaw in DACL permission handling for .job files to elevate privileges by creating a hardlink to a target file.
References (5)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H