CVE-2024-49039

An unpatched privilege escalation flaw in Windows Task Scheduler lets attackers bypass AppContainer restrictions and execute privileged RPC calls.

This vulnerability allows a local application to escalate privileges and access privileged RPC functions, enabling attackers to execute arbitrary code with elevated rights. DIB organizations must ensure Windows Task Scheduler is patched immediately to prevent privilege escalation and potential ransomware deployment. The flaw is actively exploited in the wild and linked to ransomware campaigns, making it a critical compliance and operational risk.

Shame score — A known privilege escalation vulnerability in a core Windows component was actively exploited in the wild and linked to ransomware, demonstrating severe negligence in patch management and threat intelligence.