Apr 15, 2026 • Sergiu Gatlan
CISA flags Windows Task Host vulnerability as exploited in attacks
CISA has issued an urgent warning to U.S. government agencies regarding a critical Windows Task Host privilege escalation vulnerability. This flaw allows...
Executive Summary
CISA has issued an urgent warning to U.S. government agencies regarding a critical Windows Task Host privilege escalation vulnerability. This flaw allows attackers to elevate their privileges to SYSTEM level, effectively granting them complete control over affected systems. The vulnerability poses significant risk as it enables threat actors to move laterally within networks and execute commands with the highest privileges. CISA has mandated that federal agencies implement remediation measures immediately. Organizations should prioritize patching this vulnerability and monitor for any suspicious activity involving the Windows Task Host service. Failure to address this flaw could result in complete system compromise.
Summary
CISA warned U.S. government agencies to secure their systems against a Windows Task Host privilege escalation vulnerability that could allow attackers to gain SYSTEM privileges. [...]
Published Analysis
CISA has issued an urgent warning to U.S. government agencies regarding a critical Windows Task Host privilege escalation vulnerability. This flaw allows attackers to elevate their privileges to SYSTEM level, effectively granting them complete control over affected systems. The vulnerability poses significant risk as it enables threat actors to move laterally within networks and execute commands with the highest privileges. CISA has mandated that federal agencies implement remediation measures immediately. Organizations should prioritize patching this vulnerability and monitor for any suspicious activity involving the Windows Task Host service. Failure to address this flaw could result in complete system compromise. CISA warned U.S. government agencies to secure their systems against a Windows Task Host privilege escalation vulnerability that could allow attackers to gain SYSTEM privileges. [...] CISA warned U.S. government agencies to secure their systems against a Windows Task Host privilege escalation vulnerability that could allow attackers to gain SYSTEM privileges. [...]