CVE-2006-3209: Microsoft Windows XP

High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days.

The Task scheduler (at.exe) on Microsoft Windows XP spawns each scheduled process with SYSTEM permissions, which allows local users to gain privileges. NOTE: this issue has been disputed by third parties, who state that the Task scheduler is limited to the Administrators group by default upon installation

Affected products

• Microsoft Windows XP: any version

Published 2006-06-24. Last modified 2026-06-16.