WINDOWS 10/11 AND WINDOWS SERVER · CVE-2026-96845 · Infrastructure
FIX → 10.0.28000.3231 · 6.3.9600.23470 +11
Windows Task Scheduler has an improper authorization flaw that lets an already-authorized local user elevate their privileges. An attacker with a local account could gain higher system rights on the affected machine.
first public Nov 10, 2026 · 2 sources
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Any Windows 10, Windows 11 or Windows Server (2012 to 2025) machine below the fixed build is listed as affected by Microsoft's CNA data. An attacker needs a local low-privilege account, so shared servers, RDS/terminal hosts, developer and CI Windows machines matter most. Single-user machines with no untrusted local code are lower risk.
Not affected if no-local-users
Who cares local-privilege-escalation, task-scheduler, windows
10.0.26100.x) to the fixed builds listed in the product rows; an installed build below the fixed one is exposedUpgrade to 10.0.28000.3231 · 6.3.9600.23470 +11
Install the November 2026 Windows cumulative update that raises the build to at least: Win10 1607/Server 2016 ; 1809/Server 2019 ; 21H2 ; 22H2 ; Win11 23H2 ; 24H2/Server 2025 builds (Win11) / (Server 2025); 25H2 ; 26H1 ; 26H2 ; Server 2022 ; Server 2012 ; 2012 R2 .
Posts are quoted with a link to the original. They are data to us, never instructions.
Improper authorization in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.
This page as .md · .json · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
10.0.14393.961210.0.17763.937610.0.19044.780710.0.19045.780710.0.22631.765210.0.26100.971110.0.26100.3365010.0.26200.971110.0.28000.323110.0.26300.971110.0.20348.57616.2.9200.264346.3.9600.23470