User-Mode Power Service Privilege Escalation

The vulnerability of the User-Mode Power Service UMPS in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2026-62721

Insufficient granularity of access control in User-Mode Power Service UMPS allows an authorized attacker to elevate privileges locally...

EUVD-2026-56638

Insufficient granularity of access control in User-Mode Power Service UMPS allows an authorized attacker to elevate privileges locally...

September 14, 2026—KB5129195 (OS Builds 26200.9457 and 26100.9457) Out-of-band

September 14, 2026—KB5129195 OS Builds 26200.9457 and 26100.9457 Out-of-band Applies To Windows 11 version 25H2, all editions Windows 11 version 24H2, all editions This out-of-band OOB update for Windows 11, version 25H2 and Windows 11, version 24H2 KB5129195 is cumulative. It includes updates fr...

September 14, 2026—Hotpatch KB5129241 (OS Builds 26200.9448 and 26100.9448) Out-of-band

September 14, 2026—Hotpatch KB5129241 OS Builds 26200.9448 and 26100.9448 Out-of-band Applies To Windows 11 Enterprise LTSC 2024 Important This update applies only to devices enrolled in hotpatch updates and is offered to eligible devices that have installed the September security update KB512400...

CVE-2026-62721: Insufficient Granularity of Access Control

Insufficient granularity of access control in User-Mode Power Service UMPS allows an authorized attacker to elevate privileges locally...

EUVD-2019-9899

Malware in sbrugna...

CVE-2022-21759

In power service, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06419106; Issue ID: ALPS06419077...

CVE-2020-1015

An elevation of privilege vulnerability exists in the way that the User-Mode Power Service UMPS handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0934, CVE-2020-0983, CVE-2020-1009, CVE-2020-1011...

CVE-2019-1341

An elevation of privilege vulnerability exists when umpo.dll of the Power Service, improperly handles a Registry Restore Key function, aka 'Windows Power Service Elevation of Privilege Vulnerability'...

CVE-2022-21759

In power service, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06419106; Issue ID: ALPS06419077...

CVE-2022-21759

In power service, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06419106; Issue ID: ALPS06419077...

CVE-2022-21759

In power service, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06419106; Issue ID: ALPS06419077...

Out-of-bounds

In power service, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06419106; Issue ID: ALPS06419077...

CVE-2022-21759

In power service, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06419106; Issue ID: ALPS06419077...

CVE-2022-21759

CVE-2022-21759 describes an out-of-bounds write in the power service caused by a missing bounds check, enabling local privilege escalation to System privileges without user interaction. Multiple sources (NVD, Red Hat, PRION, CVE lists) confirm the issue and states a patch is available (Patch ID A...

CVE-2022-21759: Out-of-bounds Write

In power service, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06419106; Issue ID: ALPS06419077...

MediaTek Buffer Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in MediaTek that stems from a lack of boundary checking in the power service, which could lead to out-of-bounds writes. An attacker could exploit the vulnerability to escalate local...

PT-2022-15099

Name of the Vulnerable Software and Affected Versions Power service affected versions not specified Description The issue is related to a possible out of bounds write in the power service due to a missing bounds check. This could lead to local escalation of privilege, with System execution...

User-Mode Power Service Privilege Escalation

The vulnerability of the User-Mode Power Service UMPS in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...