SandboxEscaper tweeted a local privilege escalation exploit for Windows, which currently has no patch. The flaw is that the Task Scheduler API function SchRpcSetSecurity fails to check permissions. The exploit misuses the function to alter permissions to allow a hard link to be created, and then calls a print job using XPS printer (installed with Windows XP Service Pack 2+) to call the hijack DLL as SYSTEM (via the Spooler process) The exploit currently only works on 64-bit OSes (Windows 10 and Server 2016)”]
Source: https://doublepulsar.com/task-scheduler-alpc-exploit-high-level-analysis-ff08cda6ad4f