CVE-2024-49039β€”Microsoft Windows Task Scheduler Privilege Escalation Vulnerability

PUBLISHEDvulnerability record
2024-11-12 Β· last modified January 29, 2026

Metadata

CVE ID:
CVE-2024-49039
Project:
Microsoft
Product:
Windows
Date Added:
2024-11-12
Due Date:
2024-12-03
Last Updated:
January 29, 2026

Vulnerability Name

Microsoft Windows Task Scheduler Privilege Escalation Vulnerability

Description

Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided, local application to escalate privileges outside of its AppContainer, and access privileged RPC functions.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
KNOWN

Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Additional Notes

Related News Articles

Related Weaknesses