143 matches found
CVE-2021-34484
Windows User Profile Service Elevation of Privilege Vulnerability...
CVE-2021-34484
Windows User Profile Service Elevation of Privilege Vulnerability...
CVE-2021-34484 Windows User Profile Service Elevation of Privilege Vulnerability
...
CVE-2021-34484
Windows User Profile Service Elevation of Privilege Vulnerability Recent assessments: ccondon-r7 at March 29, 2022 12:10pm UTC reported: This bug was evidently used by LAPSUS$ in the wild as part of the attack on Okta. gwillcox-r7 at March 30, 2022 4:21pm UTC reported: This bug was evidently used...
Microsoft Windows User Profile Service Directory Junction Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the User Profile...
PT-2021-3900 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows versions prior to the fixed version Description: The issue is related to the Windows User Profile Service and is associated with insufficient access restrictions. It allows an attacker to elevate their privileges. The vulnerability ca...
PT-2021-3831 · Microsoft · Windows User Profile Service +1
Name of the Vulnerable Software and Affected Versions: Windows User Profile Service ProfSvc affected versions not specified Description: The issue is related to insufficient access restrictions in the implementation of the user account profile picture in the Windows User Profile Service. It allow...
The vulnerability of the User Profile Service (ProfSvc) on Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the User Profile Service ProfSvc in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their own privileges...
The vulnerability of the Windows Operating System’s User Profile Service allows a perpetrator to trigger a service failure.
The vulnerability of the Windows User Profile Service is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
Microsoft Windows User Profile Service Directory Junction Denial-of-Service Vulnerability
This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...
Microsoft Windows User Profile Service Directory Junction Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the User Profile...
CVE-2021-26886
User Profile Service Denial of Service Vulnerability...
CVE-2021-26886
User Profile Service Denial of Service Vulnerability...
CVE-2021-26873
Windows User Profile Service Elevation of Privilege Vulnerability...
CVE-2021-26873
Windows User Profile Service Elevation of Privilege Vulnerability...
CVE-2021-26873
Windows User Profile Service Elevation of Privilege Vulnerability...
Privilege escalation
Windows User Profile Service Elevation of Privilege Vulnerability...
CVE-2021-26886
User Profile Service Denial of Service Vulnerability...
CVE-2021-26886
CVE-2021-26886 is a Microsoft Windows User Profile Service Denial of Service vulnerability affecting the User Profile Service component. CVSS v3.1 base score 6.1 (Medium): attack vector LOCAL, privileges required LOW, user interaction NONE, with high impact on availability and low impact on integ...
