Lucene search
+L

57 matches found

NVD
NVD
•added 2026/10/13 7:20 p.m.•6 views

CVE-2026-83659

Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00278EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/13 7:00 p.m.•13 views

CVE-2026-83659

The Windows User Profile Service is vulnerable to a local privilege escalation issue caused by improper link resolution before file access (CWE-59). An authorized attacker can exploit this link following flaw to elevate their privileges on the local system. No specific exploit details or remediat...

7.8CVSS5.7AI score0.00278EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•7 views

Windows User Profile Service Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00278EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-83659: Windows User Profile Service Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00278EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/23 5:21 a.m.•23 views

LegacyHive

LegacyHive : Windows user profile service arbitrary hive load elevation of privileges vulnerability The PoC requires another standard user credentials and a third username which can be an administrator account, if the PoC is successful, it will end up mounting the target user hive in current user...

6AI score
SaveExploits0
NVD
NVD
•added 2026/08/11 5:18 p.m.•72 views

CVE-2026-62832

Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...

7.8CVSS0.0037EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/11 5:06 p.m.•34 views

EUVD-2026-56678

Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...

7.8CVSS7.2AI score0.0037EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/11 5:06 p.m.•82 views

CVE-2026-62832 Windows User Profile Service Elevation of Privilege Vulnerability

...

7.8CVSS0.0037EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2026/08/11 2:00 p.m.•266 views

Windows User Profile Service Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...

7.8CVSS7.3AI score0.0037EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•13 views

CVE-2026-62832: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...

7.8CVSS7.2AI score0.0037EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/05 12:49 p.m.•29 views

Malicious code in streak-math-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5ca17a73b4b4b7a21d7ccbad12df26ca3c6ad524689f2e1520bd34724b61fbb On module import, index.js decodes a hex-obfuscated string table to reconstruct a Backblaze B2 URL and a set of Windows filesystem paths, then gates...

5.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/15 12:00 a.m.•32 views

PT-2026-70566

Name of the Vulnerable Software and Affected Versions Windows User Profile Service affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At t...

7.8CVSS7.1AI score0.0037EPSS
SaveExploits0References18
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2020-2272

Malware in sbrugna...

7.1CVSS7AI score0.00715EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2020-2219

Malware in sbrugna...

7.1CVSS6.9AI score0.00898EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•27 views

EUVD-2020-8898

Malware in sbrugna...

7.8CVSS7.3AI score0.01553EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2019-10011

Malware in sbrugna...

5.5CVSS6.7AI score0.00641EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2019-1717

Malware in sbrugna...

7.1CVSS7.4AI score0.02066EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•26 views

EUVD-2022-27051

Malicious code in bioql PyPI...

7.8CVSS7.2AI score0.01227EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2022-27075

Malicious code in bioql PyPI...

7CVSS7.3AI score0.02434EPSS
SaveExploits2References2
RedhatCVE
RedhatCVE
•added 2025/05/22 4:02 p.m.•20 views

CVE-2020-0785

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'...

7.1CVSS6.9AI score0.00715EPSS
SaveExploits0References1
Rows per page
Query Builder