Live › vulnerability › CVE-2019-1069
Go to dashboardMicrosoft Windows Task Scheduler service mishandles certain file operations, letting a local user escalate privileges. An attacker with a low-privileged account on the machine can gain higher rights, and CISA lists it as actively exploited, with ransomware use noted in the tags.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Task Scheduler | vendor | – | – |
Unknown from the sources.
Apply the Microsoft security update for CVE-2019-1069 per vendor instructions (CISA required action); exact KB and build numbers are not in the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system. To exploit the vulnerability, an attacker would require unprivileged code execution on a victim system. The security update addresses the vulnerability by correctly validating file operations.
This page as .md · .json · in your agent: get_signal("CVE-2019-1069")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.