166 matches found
CVE-2021-26886
User Profile Service Denial of Service Vulnerability...
Privilege escalation
Windows User Profile Service Elevation of Privilege Vulnerability...
CVE-2021-26886
CVE-2021-26886 is a Microsoft Windows User Profile Service Denial of Service vulnerability affecting the User Profile Service component. CVSS v3.1 base score 6.1 (Medium): attack vector LOCAL, privileges required LOW, user interaction NONE, with high impact on availability and low impact on integ...
CVE-2021-26886 User Profile Service Denial of Service Vulnerability
...
CVE-2021-26873
Technical details about CVE-2021-26873 (affected product/version, root cause, exploitability, fixes) are not provided in the connected documents. Monitor for updates from official advisories.
CVE-2021-26873 Windows User Profile Service Elevation of Privilege Vulnerability
...
User Profile Service Denial of Service Vulnerability
...
PT-2021-2334 · Microsoft · Windows User Profile Service +1
Name of the Vulnerable Software and Affected Versions: Windows User Profile Service affected versions not specified Description: The issue is related to insecure privilege management in the Windows User Profile Service. Exploitation of this issue can allow an attacker to elevate their privileges...
Microsoft Windows User Profile Service 安全漏洞
Microsoft Windows User Profile Service is a service host from Microsoft Corporation USA that performs user profile loading and unloading operations, such as logging on logging in to Windows . A security vulnerability exists in Microsoft Windows User Profile Service. The following products and...
Microsoft Windows User Profile Service 后置链接漏洞
Microsoft Windows User Profile Service is a service host from Microsoft Corporation USA that performs user profile loading and unloading operations, such as logging on logging in to Windows . A backlink vulnerability exists in Microsoft Windows User Profile Service. The following products and...
The vulnerability of the Windows User Profile Service (ProfSvc) on Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Windows User Profile Service ProfSvc on Windows operating systems is related to improper handling of network connections. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
PT-2020-5730 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a denial-of-service vulnerability in the User Profile Service of Windows operating systems, caused by a buffer overflow in memory. This vulnerability can be exploite...
The vulnerability of the Windows User Profile Service (ProfSvc), a service on Windows operating systems, allows attackers to escalate their privileges.
The vulnerability of the Windows User Profile Service ProfSvc on Windows operating systems is related to errors in handling network connections. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
Microsoft Windows User Profile Service Arbitrary File Deletion Vulnerability
This vulnerability allows local attackers to delete arbitrary files on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within handling of the...
CVE-2020-16940
An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles junction points. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context. To exploit this vulnerability, an attacker would first...
CVE-2020-16940
An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles junction points. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context. To exploit this vulnerability, an attacker would first...
Privilege escalation
An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles junction points. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context. To exploit this vulnerability, an attacker would first...
Description of the security update for SharePoint Enterprise Server 2016: October 13, 2020
None None...
Windows - User Profile Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles junction points. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context. To exploit this vulnerability, an attacker would first...
PT-2020-4375 · Microsoft · Windows User Profile Service +1
Name of the Vulnerable Software and Affected Versions: Windows User Profile Service ProfSvc affected versions not specified Description: The issue is related to the improper handling of junction points by the Windows User Profile Service ProfSvc, which can allow an attacker to elevate their...