CVE-2026-62832

Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-56678

Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...

CVE-2026-62832

The CVE-2026-62832 entry describes an elevation-of-privilege flaw in Windows' User Profile Service due to improper link resolution before file access (link following). A local, low-privilege attacker could elevate privileges on the host. The issue is tied to a CVSS v3.1 base score of 7.8 (High) w...

CVE-2026-62832 Windows User Profile Service Elevation of Privilege Vulnerability

...

Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday

Security researcher Chaotic Eclipse aka Nightmare-Eclipse has released a new proof-of-concept PoC exploit called LegacyHive. It has been described as a Windows User Profile Service arbitrary hive load elevation of privileges vulnerability. The Windows User Profile Service, also referred to as...

EUVD-2021-13657

Malware in sbrugna...

EUVD-2019-1717

Malware in sbrugna...

EUVD-2020-8898

Malware in sbrugna...

EUVD-2021-13670

Malware in sbrugna...

EUVD-2020-12236

Malware in sbrugna...

EUVD-2021-21139

Malware in sbrugna...

EUVD-2019-10011

Malware in sbrugna...

EUVD-2020-2272

Malware in sbrugna...

EUVD-2020-2219

Malware in sbrugna...

EUVD-2022-27075

Malicious code in bioql PyPI...

EUVD-2022-27051

Malicious code in bioql PyPI...

CVE-2020-1360

An elevation of privilege vulnerability exists when the Windows Profile Service improperly handles file operations, aka 'Windows Profile Service Elevation of Privilege Vulnerability'...

CVE-2020-0785

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'...

CVE-2020-0730

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'...

CVE-2019-1454

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'...