CVE-2026-62832
HighCVSS 7.8Exploitation Probability (EPSS)
High risk82th percentile - higher than 82% of all known CVEs
Summary
Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access could exploit links to gain elevated privileges, potentially compromising system integrity.
Recommendation
Apply the latest Windows security updates.
Other vulnerabilities in Windows User Profile Service
See all- CVE-2022-26904HighActively exploited
A privilege elevation vulnerability in the Windows User Profile Service. It requires authentication as a local user.
- CVE-2022-21919HighActively exploited
Windows User Profile Service Elevation of Privilege Vulnerability.
- CVE-2021-34484HighActively exploited
An elevation of privilege vulnerability in the Windows User Profile Service.
- CVE-2021-26873High
Elevation of privilege vulnerability in Windows User Profile Service. Allows an attacker to gain higher privileges.
Original NVD description (English source)
Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS