143 matches found
CVE-2021-26873
Technical details about CVE-2021-26873 (affected product/version, root cause, exploitability, fixes) are not provided in the connected documents. Monitor for updates from official advisories.
CVE-2021-26873 Windows User Profile Service Elevation of Privilege Vulnerability
...
User Profile Service Denial of Service Vulnerability
...
Microsoft Windows User Profile Service 安全漏洞
Microsoft Windows User Profile Service is a service host from Microsoft Corporation USA that performs user profile loading and unloading operations, such as logging on logging in to Windows . A security vulnerability exists in Microsoft Windows User Profile Service. The following products and...
PT-2021-2334 · Microsoft · Windows User Profile Service +1
Name of the Vulnerable Software and Affected Versions: Windows User Profile Service affected versions not specified Description: The issue is related to insecure privilege management in the Windows User Profile Service. Exploitation of this issue can allow an attacker to elevate their privileges...
Microsoft Windows User Profile Service 后置链接漏洞
Microsoft Windows User Profile Service is a service host from Microsoft Corporation USA that performs user profile loading and unloading operations, such as logging on logging in to Windows . A backlink vulnerability exists in Microsoft Windows User Profile Service. The following products and...
The vulnerability of the Windows User Profile Service (ProfSvc) on Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Windows User Profile Service ProfSvc on Windows operating systems is related to improper handling of network connections. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
PT-2020-5730 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a denial-of-service vulnerability in the User Profile Service of Windows operating systems, caused by a buffer overflow in memory. This vulnerability can be exploite...
Microsoft Windows User Profile Service Arbitrary File Deletion Vulnerability
This vulnerability allows local attackers to delete arbitrary files on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within handling of the...
CVE-2020-16940
An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles junction points. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context. To exploit this vulnerability, an attacker would first...
Privilege escalation
An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles junction points. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context. To exploit this vulnerability, an attacker would first...
Description of the security update for SharePoint Enterprise Server 2016: October 13, 2020
None None...
Windows - User Profile Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles junction points. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context. To exploit this vulnerability, an attacker would first...
PT-2020-4375 · Microsoft · Windows User Profile Service +1
Name of the Vulnerable Software and Affected Versions: Windows User Profile Service ProfSvc affected versions not specified Description: The issue is related to the improper handling of junction points by the Windows User Profile Service ProfSvc, which can allow an attacker to elevate their...
KLA11978 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, execute arbitrary code, cause denial of service, spoof user interface. Below is a complete list of vulnerabilities...
The vulnerability of the Windows User Profile Service (ProfSvc), a system service on Windows operating systems, allows attackers to escalate their privileges.
The vulnerability of the Windows User Profile Service ProfSvc on Windows operating systems is related to errors in processing links that point to file and directory paths. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...
CVE-2020-0785
An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'...
CVE-2020-0785
CVE-2020-0785 is an elevation-of-privilege flaw in the Windows User Profile Service (ProfSvc) caused by improper handling of symlinks. The vulnerability allows a local attacker with low privileges to elevate to higher privileges without user interaction, as documented in the CVE description and c...
CVE-2020-0785
An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'...
Windows User Profile Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context. To exploit this vulnerability, an attacker would first have to...