57 matches found
CVE-2026-83659
Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83659
The Windows User Profile Service is vulnerable to a local privilege escalation issue caused by improper link resolution before file access (CWE-59). An authorized attacker can exploit this link following flaw to elevate their privileges on the local system. No specific exploit details or remediat...
Windows User Profile Service Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83659: Windows User Profile Service Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...
LegacyHive
LegacyHive : Windows user profile service arbitrary hive load elevation of privileges vulnerability The PoC requires another standard user credentials and a third username which can be an administrator account, if the PoC is successful, it will end up mounting the target user hive in current user...
CVE-2026-62832
Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-56678
Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62832 Windows User Profile Service Elevation of Privilege Vulnerability
...
Windows User Profile Service Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62832: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...
Malicious code in streak-math-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5ca17a73b4b4b7a21d7ccbad12df26ca3c6ad524689f2e1520bd34724b61fbb On module import, index.js decodes a hex-obfuscated string table to reconstruct a Backblaze B2 URL and a set of Windows filesystem paths, then gates...
PT-2026-70566
Name of the Vulnerable Software and Affected Versions Windows User Profile Service affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At t...
EUVD-2020-2272
Malware in sbrugna...
EUVD-2020-2219
Malware in sbrugna...
EUVD-2020-8898
Malware in sbrugna...
EUVD-2019-10011
Malware in sbrugna...
EUVD-2019-1717
Malware in sbrugna...
EUVD-2022-27051
Malicious code in bioql PyPI...
EUVD-2022-27075
Malicious code in bioql PyPI...
CVE-2020-0785
An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'...