163 matches found
CVE-2019-0986
Security Research for FUN All focused on Microsoft Windows OS CVE-2019-0986 https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0986 This is the PoC I've sent to Microsoft when I reported the above vulnerability This PoC exploits "User Profile Service" ProfSvc.dll. It will...
CVE-2026-62832
Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62832
The CVE-2026-62832 entry describes an elevation-of-privilege flaw in Windows' User Profile Service due to improper link resolution before file access (link following). A local, low-privilege attacker could elevate privileges on the host. The issue is tied to a CVSS v3.1 base score of 7.8 (High) w...
EUVD-2026-56678
Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62832 Windows User Profile Service Elevation of Privilege Vulnerability
...
CVE-2026-62832 Windows User Profile Service Elevation of Privilege Vulnerability
...
Windows User Profile Service Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62832: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...
The vulnerability of the User Profile Service (ProfSvc) on Windows operating systems allows a perpetrator to elevate their privileges and execute arbitrary code.
The vulnerability of the User Profile Service ProfSvc in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...
Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday
Security researcher Chaotic Eclipse aka Nightmare-Eclipse has released a new proof-of-concept PoC exploit called LegacyHive. It has been described as a Windows User Profile Service arbitrary hive load elevation of privileges vulnerability. The Windows User Profile Service, also referred to as...
PT-2026-70566
Name of the Vulnerable Software and Affected Versions Windows User Profile Service affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At t...
PT-2026-60888
Уязвимость службы профилей пользователя User Profile Service ProfSvc операционных систем Windows связана с небезопасным управлением привилегиями. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии и выполнить произвольный код...
EUVD-2021-21139
Malware in sbrugna...
EUVD-2020-8898
Malware in sbrugna...
EUVD-2020-2219
Malware in sbrugna...
EUVD-2021-13657
Malware in sbrugna...
EUVD-2021-13670
Malware in sbrugna...
EUVD-2019-1717
Malware in sbrugna...