CVE-2026-62832

Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-56678

Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...

CVE-2026-62832

The CVE-2026-62832 entry describes an elevation-of-privilege flaw in Windows' User Profile Service due to improper link resolution before file access (link following). A local, low-privilege attacker could elevate privileges on the host. The issue is tied to a CVSS v3.1 base score of 7.8 (High) w...

CVE-2026-62832 Windows User Profile Service Elevation of Privilege Vulnerability

...

CVE-2026-62832 Windows User Profile Service Elevation of Privilege Vulnerability

...

Windows User Profile Service Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...

The vulnerability of the User Profile Service (ProfSvc) on Windows operating systems allows a perpetrator to elevate their privileges and execute arbitrary code.

The vulnerability of the User Profile Service ProfSvc in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday

Security researcher Chaotic Eclipse aka Nightmare-Eclipse has released a new proof-of-concept PoC exploit called LegacyHive. It has been described as a Windows User Profile Service arbitrary hive load elevation of privileges vulnerability. The Windows User Profile Service, also referred to as...

PT-2026-70566

Name of the Vulnerable Software and Affected Versions Windows User Profile Service affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At t...

EUVD-2019-1717

Malware in sbrugna...

EUVD-2021-21139

Malware in sbrugna...

EUVD-2020-8898

Malware in sbrugna...

EUVD-2021-13670

Malware in sbrugna...

EUVD-2021-13657

Malware in sbrugna...

EUVD-2019-10011

Malware in sbrugna...

EUVD-2020-2272

Malware in sbrugna...

EUVD-2020-2219

Malware in sbrugna...

EUVD-2022-27051

Malicious code in bioql PyPI...

EUVD-2022-27075

Malicious code in bioql PyPI...

CVE-2020-0785

An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'...