All packages
Windows User Profile Service vulnerabilities
5 known CVE vulnerabilities in Windows User Profile Service, translated and rated.
- CVE-2022-26904HighActively exploited
A privilege elevation vulnerability in the Windows User Profile Service. It requires authentication as a local user.
- CVE-2022-21919HighActively exploited
Windows User Profile Service Elevation of Privilege Vulnerability.
- CVE-2021-34484HighActively exploited
An elevation of privilege vulnerability in the Windows User Profile Service.
- CVE-2026-62832High
Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.
- CVE-2021-26873High
Elevation of privilege vulnerability in Windows User Profile Service. Allows an attacker to gain higher privileges.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS