Windows Task Scheduler DeleteExpiredTaskAfter File Deletion Privilege Escalation

The Task Scheduler can be made to delete a task after it’s trigger has expired. No check is made to ensure the task file is not a junction which allows arbitrary files to be deleted by the system user leading to EoP.

Leave a Reply