CVE-2024-49039: Microsoft Windows Task Scheduler Privilege Escalation Vulnerability
Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided, local application to escalate privileges outside of its AppContainer, and access privileged RPC functions.
Other sources
Windows Task Scheduler Elevation of Privilege Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.10240.20826Patch KB5046665 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.7515Patch KB5046612 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.2314Fixed in 10.0.26100.2240Patch KB5046696 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.25398.1251Patch KB5046618 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22631.4460Patch KB5046633 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19045.5131Patch KB5046613 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22621.4460Patch KB5046633 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19044.5131Patch KB5046613 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.2849Fixed in 10.0.20348.2819Patch KB5046698 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.6532Patch KB5046615
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-49039?
CVE-2024-49039 is classified as a privilege escalation vulnerability.
How do I fix CVE-2024-49039?
To fix CVE-2024-49039, apply the latest security updates and patches provided by Microsoft for your affected Windows version.
Which versions of Windows are affected by CVE-2024-49039?
CVE-2024-49039 affects multiple versions of Windows including Windows 10 and Windows 11, across various builds.
Can CVE-2024-49039 be exploited remotely?
No, CVE-2024-49039 requires local access to exploit the privilege escalation vulnerability.
What kind of attacks can occur due to CVE-2024-49039?
CVE-2024-49039 can allow an attacker to escalate privileges and access restricted functionality within the Windows operating system.