Privilege escalation

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'...

CVE-2020-0785: Improper Privilege Management

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'...

PT-2020-1910

Name of the Vulnerable Software and Affected Versions Windows User Profile Service ProfSvc affected versions not specified Description The issue is related to the improper handling of symlinks by the Windows User Profile Service, which can lead to an elevation of privilege. This can potentially...

CVE-2020-0730

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'...

PT-2020-1679

Name of the Vulnerable Software and Affected Versions Windows User Profile Service ProfSvc affected versions not specified Description The issue is related to the improper handling of symlinks by the Windows User Profile Service, which can allow an attacker to elevate their privileges. This can...

CVE-2020-0730: Improper Link Resolution Before File Access

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'...

CVE-2019-1454

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'...

Privilege escalation

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'...

CVE-2019-1454: Improper Privilege Management

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'...

PT-2019-3911

Name of the Vulnerable Software and Affected Versions Windows User Profile Service ProfSvc affected versions not specified Description The issue is related to errors in handling symbolic links by the Windows User Profile Service ProfSvc. Exploitation of this issue may allow an attacker to elevate...

KLA11871 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code, obtain sensitive information, bypass security restrictions. Below is a complete list of...

KLA11608 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, cause denial of service, bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An elevation...

CVE-2019-0986

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context. To exploit this vulnerability, an attacker would first have to...

CVE-2019-0986: Improper Link Resolution Before File Access

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context. To exploit this vulnerability, an attacker would first have to...

Windows User Profile Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context. To exploit this vulnerability, an attacker would first have to...

MS15-003: Vulnerability in Windows User Profile service could allow elevation of privilege: January 13, 2015

None None...

MS15-003: Vulnerability in Windows User Profile Service Could Allow Elevation of Privilege (3021674)

The remote Windows host is affected by a privilege escalation vulnerability due to improper validation of user privilege in the Windows User Profile Service ProfSvc. A local attacker, with a specially crafted application, can load registry hives associated with other user accounts to execute...