Live · 98 sources · updated 18m ago
The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

CVE record · 2 sources

CVE-2026-96053

CVSS 7.8

Improper neutralization of special elements used in a command ('command injection') in Windows Task Scheduler allows an authorized attacker to…

Vendor
Microsoft
Product
Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2, Windows 10 Version 22H2
CVSS v3.1
7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-77
Exposure class
Operating system

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

  1. CVE NVD

    Improper neutralization of special elements used in a command ('command injection') in Windows Task Scheduler allows an authorized attacker to…

    Improper neutralization of special elements used in a command ('command injection') in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.

  2. Advisory MSRC

    Windows Task Scheduler Elevation of Privilege Vulnerability

    Improper neutralization of special elements used in a command ('command injection') in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help