Overview
Microsoft Windows task scheduler contains a local privilege escalation vulnerability in the Advanced Local Procedure Call (ALPC) interface, which can allow a local user to obtain SYSTEM privileges.
Description
Microsoft Windows task scheduler contains a vulnerability in the handling of ALPC, which can allow a local user to gain SYSTEM privileges. We have confirmed that the public exploit code works on 64-bit Windows 10 and Windows Server 2016 systems. Compatibility with other Windows versions may be possible with modification of the publicly-available exploit source code.
Impact
A local user may be able to gain elevated (SYSTEM) privileges.
Solution
The CERT/CC is currently unaware of a practical solution to this problem.
Vendor Information (Learn More)
Vendor: Microsoft
Status: Affected
Date Notified: 27 Aug 2018
Date Updated: 27 Aug 2018
Read more:
Does this also affect earlier versions of Windows?
All the articles I've read state it only applies to Windows 10 and Server 2016.
Edit: Ignore that, I just noticed this in the description: "Compatibility with other Windows versions may be possible with modification of the publicly-available exploit source code."
Quote