Microsoft Windows 'SetJobFileSecurityByName()' Function Local Privilege Escalation Vulnerability

Bugtraq ID:	108423
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	May 21 2019 12:00AM
Updated:	May 21 2019 12:00AM
Credit:	SandboxEscaper
Vulnerable:	Microsoft Windows Server 2019 0 Microsoft Windows Server 2016 0 Microsoft Windows 8 0 Microsoft Windows 10
Not Vulnerable:

Microsoft Windows 'SetJobFileSecurityByName()' Function Local Privilege Escalation Vulnerability

Microsoft Windows is prone to a local privilege-escalation vulnerability.

A local attacker can exploit this issue to gain elevated privileges in the context of the affected system.

Microsoft Windows 'SetJobFileSecurityByName()' Function Local Privilege Escalation Vulnerability

The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.

Microsoft Windows 'SetJobFileSecurityByName()' Function Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Microsoft Windows 'SetJobFileSecurityByName()' Function Local Privilege Escalation Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• Microsoft Windows Homepage (Microsoft )
  
• SandboxEscaper/polarbearrepo (Github)
  
• Windows 10 zero-day exploit code released online (Zdnet)
  
• CVE-2019-1069 | Task Scheduler Elevation of Privilege Vulnerability (Microsoft)