PT-2026-60888

Уязвимость службы профилей пользователя User Profile Service ProfSvc операционных систем Windows связана с небезопасным управлением привилегиями. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии и выполнить произвольный код...

CVE-2020-16940

The CVE-2020-16940 issue is an elevation of privilege in Windows computing environments caused by the Windows User Profile Service (ProfSvc) mishandling junction points. The vulnerability allows an attacker who can log on to exploit a specially crafted application to delete files or folders with ...

CVE-2020-16940: Improper Privilege Management

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles junction points. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context. To exploit this vulnerability, an attacker would first...

CVE-2020-0785

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'...

CVE-2020-0785: Improper Privilege Management

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'...

PT-2020-1910

Name of the Vulnerable Software and Affected Versions Windows User Profile Service ProfSvc affected versions not specified Description The issue is related to the improper handling of symlinks by the Windows User Profile Service, which can lead to an elevation of privilege. This can potentially...

The vulnerability of the ProfSvc service in Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the ProfSvc service in Windows operating systems is related to deficiencies in handling symbolic links. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2020-0730

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'...

PT-2020-1679

Name of the Vulnerable Software and Affected Versions Windows User Profile Service ProfSvc affected versions not specified Description The issue is related to the improper handling of symlinks by the Windows User Profile Service, which can allow an attacker to elevate their privileges. This can...

CVE-2020-0730: Improper Link Resolution Before File Access

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'...

CVE-2019-1454

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'...

CVE-2019-1454: Improper Privilege Management

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'...

PT-2019-3911

Name of the Vulnerable Software and Affected Versions Windows User Profile Service ProfSvc affected versions not specified Description The issue is related to errors in handling symbolic links by the Windows User Profile Service ProfSvc. Exploitation of this issue may allow an attacker to elevate...

KB4525236: Windows 10 Version 1607 and Windows Server 2016 November 2019 Security Update

The remote Windows host is missing security update 4525236. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating...

CVE-2019-0986: Improper Link Resolution Before File Access

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context. To exploit this vulnerability, an attacker would first have to...

PT-2019-2602

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to the improper handling of symlinks by the Windows User Profile Service ProfSvc, which can lead to an elevation of privilege. This allows an attacker to potentially...

CVE-2015-0004

CVE-2015-0004 concerns a local privilege-escalation in the Windows User Profile Service (ProfSvc). According to the provided sources, the vulnerability is exploited by a junction attack that loads another user’s UsrClass.dat registry hive, enabling local users to gain privileges. Affected product...

CVE-2015-0004: Undefined Security Weakness

The User Profile Service aka ProfSvc in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges by conducting a junction atta...