coldbraid

CVE-2022-26904 Microsoft Windows

Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.

CVSS
not scored

CWE-362

On CISA’s exploited list

Microsoft Windows User Profile Service Privilege Escalation Vulnerability

Added
2022-04-25
Federal patch deadline
2022-05-16
Ransomware use
not known