A security researcher has publicly disclosed the details of zero-day privilege escalation vulnerability affecting all Microsofts Windows operating systems. The vulnerability resides in the Windows task scheduler program and ties to errors in the handling of Advanced Local Procedure Call (ALPC) systems. Experts warn of malware that could include the PoC code to gain system privileges on Windows systems. Microsoft is expected to address the vulnerability in September security Patch Tuesday, that is scheduled for September 11. The flaw received a CVSS score of 6.4 to 6.8.”]
Source: https://securityaffairs.co/wordpress/75717/breaking-news/zero-day-windows.html