PT-2021-3900 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows versions prior to the fixed version Description: The issue is related to the Windows User Profile Service and is associated with insufficient access restrictions. It allows an attacker to elevate their privileges. The vulnerability ca...

PT-2021-3831 · Microsoft · Windows User Profile Service +1

Name of the Vulnerable Software and Affected Versions: Windows User Profile Service ProfSvc affected versions not specified Description: The issue is related to insufficient access restrictions in the implementation of the user account profile picture in the Windows User Profile Service. It allow...

The vulnerability of the User Profile Service (ProfSvc) on Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the User Profile Service ProfSvc in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their own privileges...

The vulnerability of the Windows Operating System’s User Profile Service allows a perpetrator to trigger a service failure.

The vulnerability of the Windows User Profile Service is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Microsoft Windows User Profile Service Directory Junction Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...

Microsoft Windows User Profile Service Directory Junction Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the User Profile...

CVE-2021-26886

User Profile Service Denial of Service Vulnerability...

CVE-2021-26886

User Profile Service Denial of Service Vulnerability...

CVE-2021-26873

Windows User Profile Service Elevation of Privilege Vulnerability...

CVE-2021-26873

Windows User Profile Service Elevation of Privilege Vulnerability...

Privilege escalation

Windows User Profile Service Elevation of Privilege Vulnerability...

CVE-2021-26886

CVE-2021-26886 is a Microsoft Windows User Profile Service Denial of Service vulnerability affecting the User Profile Service component. CVSS v3.1 base score 6.1 (Medium): attack vector LOCAL, privileges required LOW, user interaction NONE, with high impact on availability and low impact on integ...

CVE-2021-26886 User Profile Service Denial of Service Vulnerability

...

CVE-2021-26873 Windows User Profile Service Elevation of Privilege Vulnerability

...

CVE-2021-26873

Technical details about CVE-2021-26873 (affected product/version, root cause, exploitability, fixes) are not provided in the connected documents. Monitor for updates from official advisories.

User Profile Service Denial of Service Vulnerability

...

PT-2021-2334 · Microsoft · Windows User Profile Service +1

Name of the Vulnerable Software and Affected Versions: Windows User Profile Service affected versions not specified Description: The issue is related to insecure privilege management in the Windows User Profile Service. Exploitation of this issue can allow an attacker to elevate their privileges...

Microsoft Windows User Profile Service 后置链接漏洞

Microsoft Windows User Profile Service is a service host from Microsoft Corporation USA that performs user profile loading and unloading operations, such as logging on logging in to Windows . A backlink vulnerability exists in Microsoft Windows User Profile Service. The following products and...

Microsoft Windows User Profile Service 安全漏洞

Microsoft Windows User Profile Service is a service host from Microsoft Corporation USA that performs user profile loading and unloading operations, such as logging on logging in to Windows . A security vulnerability exists in Microsoft Windows User Profile Service. The following products and...

The vulnerability of the Windows User Profile Service (ProfSvc) on Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows User Profile Service ProfSvc on Windows operating systems is related to improper handling of network connections. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...