---
id: "CVE-2019-1069"
kind: "vulnerability"
aliases: ["CVE-2019-1069"]
title: "Microsoft Task Scheduler: Microsoft Task Scheduler Privilege Escalation Vulnerability"
severity: "high"
cvss: 7.8
epss: 0.06117
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "Microsoft Task Scheduler", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "infrastructure", "ransomware", "self-hosted", "task-scheduler", "windows"]
not_affected_if: ["patched-windows"]
published_at: "2019-06-12T14:29:04+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-23T21:57:35+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1069", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2019-1069", "first_seen_at": "2026-10-23T19:13:44+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1069", "first_seen_at": "2026-10-23T21:57:35+00:00"}]
---

# Microsoft Task Scheduler: Microsoft Task Scheduler Privilege Escalation Vulnerability

Microsoft Windows Task Scheduler service mishandles certain file operations, letting a local user escalate privileges. An attacker with a low-privileged account on the machine can gain higher rights, and CISA lists it as actively exploited, with ransomware use noted in the tags.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Microsoft Task Scheduler affected ? fixed ?

## Fix

Apply the Microsoft security update for CVE-2019-1069 per vendor instructions (CISA required action); exact KB and build numbers are not in the sources.

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-1069
- 2026-10-23T19:13:44+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2019-1069
- 2026-10-23T21:57:35+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2019-1069

## From the sources

An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system.
To exploit the vulnerability, an attacker would require unprivileged code execution on a victim system.
The security update addresses the vulnerability by correctly validating file operations.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_