CVE Catalog
Actively exploited in the wild
Microsoft Windows User Profile Service Privilege Escalation Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2022-03-31. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2021-34484
HighCVSS 7.8KEVExploitation Probability (EPSS)
Very high risk15.62%
97th percentile - higher than 97% of all known CVEs
Summary
An elevation of privilege vulnerability in the Windows User Profile Service.
Risk Assessment
An attacker could exploit this to gain elevated privileges, potentially leading to unauthorized access to data or the system.
Recommendation
Apply the security update released by Microsoft.
Original NVD description (English source)
Windows User Profile Service Elevation of Privilege Vulnerability