{"id":"CVE-2019-1069","title":"An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations","summary":"An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system.\nTo exploi…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-59","CWE-59"],"vendor":"microsoft","product":"windows_10_1507","affected":["windows_10_1507","windows_10_1607","windows_10_1703","windows_10_1709","windows_10_1803","windows_10_1809","windows_10_1903","windows_server_1803","windows_server_1903","windows_server_2016","windows_server_2019"],"published":"2019-06-12","updated":"2026-08-12","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2019-1069","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1069","label":"secure@microsoft.com"},{"url":"https://blog.0patch.com/2019/06/another-task-scheduler-0day-another.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1069","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.kb.cert.org/vuls/id/119704","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1069","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","kev","in-the-wild","exploit-available"],"epss":0.06117,"epssPercentile":0.93193,"kev":true,"kevDateAdded":"2022-03-15","kevDueDate":"2022-04-05","kevRansomware":true,"exploited":true,"ingestedAt":"2026-08-12T05:52:07.134Z","exploits":{"github":1,"githubRepos":["https://github.com/S3cur3Th1sSh1t/SharpPolarBear"],"checkedAt":"2026-09-21T15:23:40.172Z"},"exploitAvailable":true,"slug":"CVE-2019-1069","body":"## Overview\n\nAn elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system.\nTo exploit the vulnerability, an attacker would require unprivileged code execution on a victim system.\nThe security update addresses the vulnerability by correctly validating file operations.\n\n## Affected\n\n- `windows_10_1507`\n- `windows_10_1607`\n- `windows_10_1703`\n- `windows_10_1709`\n- `windows_10_1803`\n- `windows_10_1809`\n- `windows_10_1903`\n- `windows_server_1803`\n- `windows_server_1903`\n- `windows_server_2016`\n- `windows_server_2019`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":74,"depthScoreParts":{"impact":42.9,"likelihood":1.2,"exploitation":25,"ransomware":5},"changes":[{"seq":4456,"id":"CVE-2019-1069","ts":1788887180857,"field":"exploit_available","old":"false","new":"true"},{"seq":3339,"id":"CVE-2019-1069","ts":1788886299822,"field":"exploit_available","old":"true","new":"false"},{"seq":2194,"id":"CVE-2019-1069","ts":1788882969525,"field":"exploit_available","old":"false","new":"true"},{"seq":1223,"id":"CVE-2019-1069","ts":1788882375595,"field":"exploit_available","old":"true","new":"false"},{"seq":337,"id":"CVE-2019-1069","ts":1788881816115,"field":"exploit_available","old":"false","new":"true"}]}