169 matches found
CVE-2019-0986
Security Research for FUN All focused on Microsoft Windows OS CVE-2019-0986 https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0986 This is the PoC I've sent to Microsoft when I reported the above vulnerability This PoC exploits "User Profile Service" ProfSvc.dll. It will...
CVE-2026-83659
Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83659
The Windows User Profile Service is vulnerable to a local privilege escalation issue caused by improper link resolution before file access (CWE-59). An authorized attacker can exploit this link following flaw to elevate their privileges on the local system. No specific exploit details or remediat...
Windows User Profile Service Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...
PT-2026-112469
Name of the Vulnerable Software and Affected Versions Windows User Profile Service affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At t...
CVE-2026-83659: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83659: Windows User Profile Service Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62832
Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-56678
Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62832 Windows User Profile Service Elevation of Privilege Vulnerability
...
CVE-2026-62832 Windows User Profile Service Elevation of Privilege Vulnerability
...
CVE-2026-62832
The CVE-2026-62832 entry describes an elevation-of-privilege flaw in Windows' User Profile Service due to improper link resolution before file access (link following). A local, low-privilege attacker could elevate privileges on the host. The issue is tied to a CVSS v3.1 base score of 7.8 (High) w...
Windows User Profile Service Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62832: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...
User Profile Service RCE
The vulnerability of the User Profile Service ProfSvc in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...
Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday
Security researcher Chaotic Eclipse aka Nightmare-Eclipse has released a new proof-of-concept PoC exploit called LegacyHive. It has been described as a Windows User Profile Service arbitrary hive load elevation of privileges vulnerability. The Windows User Profile Service, also referred to as...
PT-2026-70566
Name of the Vulnerable Software and Affected Versions Windows User Profile Service affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At t...
PT-2026-60888
Уязвимость службы профилей пользователя User Profile Service ProfSvc операционных систем Windows связана с небезопасным управлением привилегиями. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии и выполнить произвольный код...