CVE-2024-49039 Analizi
Windows Task Scheduler yetki yukseltme acigi. HijackLoader kampanyalarinda SYSTEM yetkisi elde etmek icin kullanilmistir.
CVE-2024-49039
Windows Task Scheduler privilege escalation vulnerability. It is clear that HijackLoader and other loader families use it to escape the sandbox environment and gain system privileges.
Vulnerability Profile
CVSS Score
8.8 / 10.0
Severity
High
Exploitation Status
⚠ Active Exploitation
Patch Status
✓ Patch Available
Affected Software
Windows 10/11, Windows Server 2016/2019/2022
Exploitation Method
Privilege Escalation
MITRE ATT&CK
T1053.005 - Scheduled Task/Job