CVE-2020-16940

The CVE-2020-16940 issue is an elevation of privilege in Windows computing environments caused by the Windows User Profile Service (ProfSvc) mishandling junction points. The vulnerability allows an attacker who can log on to exploit a specially crafted application to delete files or folders with ...

CVE-2020-16940: Improper Privilege Management

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles junction points. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context. To exploit this vulnerability, an attacker would first...

CVE-2020-0785

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'...

CVE-2020-0785: Improper Privilege Management

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'...

The vulnerability of the ProfSvc service in Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the ProfSvc service in Windows operating systems is related to deficiencies in handling symbolic links. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2020-0730

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'...

CVE-2020-0730: Improper Link Resolution Before File Access

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'...

CVE-2019-1454

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'...

CVE-2019-1454: Improper Privilege Management

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'...

KB4525236: Windows 10 Version 1607 and Windows Server 2016 November 2019 Security Update

The remote Windows host is missing security update 4525236. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating...

CVE-2019-0986: Improper Link Resolution Before File Access

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context. To exploit this vulnerability, an attacker would first have to...

CVE-2015-0004

CVE-2015-0004 concerns a local privilege-escalation in the Windows User Profile Service (ProfSvc). According to the provided sources, the vulnerability is exploited by a junction attack that loads another user’s UsrClass.dat registry hive, enabling local users to gain privileges. Affected product...

CVE-2015-0004: Undefined Security Weakness

The User Profile Service aka ProfSvc in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges by conducting a junction atta...