CVE Catalog

CVE-2026-62832

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

High risk
2.39%

82th percentile - higher than 82% of all known CVEs

Summary

Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.

Risk Assessment

An attacker with local access could exploit links to gain elevated privileges, potentially compromising system integrity.

Recommendation

Apply the latest Windows security updates.

Original NVD description (English source)

Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS