CVE-2015-0098

Published: Apr 14, 2015Modified: May 6, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Task Scheduler in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to gain privileges by triggering application execution by an invalid task, aka "Task Scheduler Elevation of Privilege Vulnerability."

Affected (3)

Products: Microsoft: Windows 7, Windows Server 2008

Microsoft

2 products

Windows 7

Windows Server 2008

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 7	All versions
Microsoft Windows 7	All versions
Microsoft Windows Server 2008	Version r2 sp1

Related CWEs

CWE-264

References (4)

http://www.securitytracker.com/id/1032112

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-037

Source: secure@microsoft.com

http://www.securitytracker.com/id/1032112

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-037

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.