CVE-2021-26873
HighCVSS 7.0Exploitation Probability (EPSS)
Elevated risk63th percentile - higher than 63% of all known CVEs
Summary
Elevation of privilege vulnerability in Windows User Profile Service. Allows an attacker to gain higher privileges.
Risk Assessment
Risk of privilege escalation and system control.
Recommendation
Install security patches for Windows User Profile Service.
Other vulnerabilities in Windows User Profile Service
See all- CVE-2022-26904HighActively exploited
A privilege elevation vulnerability in the Windows User Profile Service. It requires authentication as a local user.
- CVE-2022-21919HighActively exploited
Windows User Profile Service Elevation of Privilege Vulnerability.
- CVE-2021-34484HighActively exploited
An elevation of privilege vulnerability in the Windows User Profile Service.
- CVE-2026-62832High
Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Windows User Profile Service Elevation of Privilege Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS