Lucene search
+L

379 matches found

Information Security Automation
Information Security Automation
added 2024/12/04 1:21 p.m.85 views

About Elevation of Privilege – Windows Task Scheduler (CVE-2024-49039) vulnerability

About Elevation of Privilege - Windows Task Scheduler CVE-2024-49039 vulnerability. It was released on November Microsoft Patch Tuesday and showed signs of exploitation in the wild right away. To exploit the vulnerability, an authenticated attacker runs a specially crafted application on the targ...

8.8CVSS7.1AI score0.14179EPSS
SaveExploits2
The Hacker News
The Hacker News
added 2024/11/13 7:14 a.m.23 views

Microsoft Fixes 90 New Flaws, Including Actively Exploited NTLM and Task Scheduler Bugs

Microsoft on Tuesday revealed that two security flaws impacting Windows NT LAN Manager NTLM and Task Scheduler have come under active exploitation in the wild. The security vulnerabilities are among the 90 security bugs the tech giant addressed as part of its Patch Tuesday update for November 202...

9.9CVSS8.9AI score0.84108EPSS
SaveExploits5
BDU FSTEC
BDU FSTEC
added 2024/11/13 12:00 a.m.21 views

The vulnerability of the Task Scheduler in Windows operating systems allows a malicious individual to escalate their privileges.

The vulnerability of the Task Scheduler in Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to increase their privileges, provided that a specially crafted application is executed. Additionally, updates from...

8.8CVSS7.8AI score0.14179EPSS
SaveExploits2References2
Talos Blog
Talos Blog
added 2024/11/12 11:11 p.m.36 views

November Patch Tuesday release contains three critical remote code execution vulnerabilities

The Patch Tuesday for November of 2024 includes 89 vulnerabilities, including four that Microsoft marked as "critical." The remaining vulnerabilities listed are classified as "important." Microsoft assessed that exploitation of the four "critical" vulnerabilities is "less likely." CVE-2024-43639 ...

9.9CVSS10AI score0.84108EPSS
SaveExploits5
Krebs on Security
Krebs on Security
added 2024/11/12 9:59 p.m.49 views

Microsoft Patch Tuesday, November 2024 Edition

Microsoft today released updates to plug at least 89 security holes in its Windows operating systems and other software. November's patch batch includes fixes for two zero-day vulnerabilities that are already being exploited by attackers, as well as two other flaws that were publicly disclosed...

9.8CVSS9AI score0.84108EPSS
SaveExploits4
Qualys Blog
Qualys Blog
added 2024/11/12 7:59 p.m.41 views

Microsoft and Adobe Patch Tuesday, November 2024 Security Update Review

Microsoft has released its November 2024 Patch Tuesday updates, targeting various vulnerabilities that could impact users and organizations worldwide. From zero-day threats to key product patches, here’s what’s crucial to apply this month. Here’s a breakdown of the updates and how they impact you...

9.8CVSS9.2AI score0.84108EPSS
SaveExploits5
NCSC
NCSC
added 2024/11/12 6:53 p.m.16 views

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the following categories of damage: - Denial-of-Service DoS - Execution of arbitrary code User Rights - Execution of arbitrary code System Rights - Obtaining...

9.8CVSS8.8AI score0.84108EPSS
SaveExploits5
NVD
NVD
added 2024/11/12 6:15 p.m.70 views

CVE-2024-49039

Windows Task Scheduler Elevation of Privilege Vulnerability...

8.8CVSS0.14179EPSS
SaveExploits2References2
OSV
OSV
added 2024/11/12 6:15 p.m.6 views

CVE-2024-49039

Windows Task Scheduler Elevation of Privilege Vulnerability...

8.8CVSS7.4AI score0.14179EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
added 2024/11/12 5:54 p.m.24 views

CVE-2024-49039 Windows Task Scheduler Elevation of Privilege Vulnerability

...

8.8CVSS7AI score0.14179EPSS
SaveExploits2References1
CVE
CVE
added 2024/11/12 5:54 p.m.500 views

CVE-2024-49039

CVE-2024-49039 is a Windows Task Scheduler privilege-escalation vulnerability. An authenticated local attacker can elevate privileges outside of AppContainer and access privileged RPC functions via the Task Scheduler, enabling local privilege escalation with high impact (CVE-2024-49039). There ar...

8.8CVSS8.6AI score0.14179EPSS
SaveIn wildExploits2References2Affected Software13
Cvelist
Cvelist
added 2024/11/12 5:54 p.m.52 views

CVE-2024-49039 Windows Task Scheduler Elevation of Privilege Vulnerability

...

8.8CVSS0.14179EPSS
SaveExploits2References1
Microsoft CVE
Microsoft CVE
added 2024/11/12 8:00 a.m.37 views

Windows Task Scheduler Elevation of Privilege Vulnerability

...

8.8CVSS7.3AI score0.14179EPSS
SaveExploits2
ATTACKERKB
ATTACKERKB
added 2024/11/12 12:00 a.m.178 views

CVE-2024-49039

Windows Task Scheduler Elevation of Privilege Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

8.8CVSS6.9AI score0.14179EPSS
SaveIn wildExploits2References2
CNNVD
CNNVD
added 2024/11/12 12:00 a.m.10 views

Microsoft Windows Task Scheduler 授权问题漏洞

Microsoft Windows Task Scheduler is an automation tool from Microsoft Corporation USA that allows users to automate scheduled tasks when specific conditions are met. An authorization issue vulnerability exists in Microsoft Windows Task Scheduler. An attacker could exploit the vulnerability to...

8.8CVSS8.8AI score0.14179EPSS
SaveExploits2References2
VulnCheck KEV
VulnCheck KEV
added 2024/11/12 12:00 a.m.8 views

VulnCheck KEV: CVE-2024-49039

Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided, local application to escalate privileges outside of its AppContainer, and access privileged RPC functions...

8.8CVSS7.2AI score0.14179EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
added 2024/11/12 12:00 a.m.8 views

PT-2024-7873

Name of the Vulnerable Software and Affected Versions Windows Task Scheduler versions prior to the fixed version in November Patch Tuesday Description The vulnerability is an elevation-of-privilege issue in the Windows Task Scheduler, allowing attackers to elevate their privileges to Medium...

8.8CVSS7.4AI score0.14179EPSS
SaveExploits2References138
CISA KEV Catalog
CISA KEV Catalog
added 2024/11/12 12:00 a.m.110 views

Microsoft Windows Task Scheduler Privilege Escalation Vulnerability

Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided, local application to escalate privileges outside of its AppContainer, and access privileged RPC functions...

8.8CVSS7AI score0.14179EPSS
SaveIn wildExploits2
CNNVD
CNNVD
added 2024/10/09 12:00 a.m.10 views

Fortra Robot Schedule Enterprise Agent 安全漏洞

Fortra Robot Schedule Enterprise Agent is a component of Fortra's Enterprise Task Scheduler software. A security vulnerability exists in Fortra Robot Schedule Enterprise Agent versions prior to 3.05 that stems from FTP username and password information being written to the agent log file when...

5.5CVSS6.6AI score0.00179EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/14 12:00 a.m.14 views

Microsoft Windows Task Scheduler 后置链接漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Windows Task Scheduler. The following products and versions are affected:Windows 10 Version 21H2 for 32-bit Systems,Windows 10 Version 21H2 fo...

7.8CVSS6.4AI score0.00818EPSS
SaveExploits0References4
Rows per page
Query Builder