PULSE
LIVE0signals / 24h
ES
FEED
vulnKEV agrega CVE-2023-49105 — ownCloud / ownCloudvulnKEV agrega CVE-2026-53362 — Linux / KernelvulnKEV agrega CVE-2026-66384 — JFrog / ArtifactoryvulnKEV agrega CVE-2021-23758 — Ajax.NET Professional / Ajax.NET ProfessionalvulnKEV agrega CVE-2015-3246 — Red Hat / LibuservulnKEV agrega CVE-2015-5287 — Red Hat / Automatic Bug Reporting ToolvulnKEV agrega CVE-2022-0995 — Linux / KernelvulnKEV agrega CVE-2026-8452 — Citrix / NetScaler ADC and NetScaler GatewayvulnKEV agrega CVE-2019-1068 — Microsoft / SQL ServervulnKEV agrega CVE-2026-60004 — Gitea / GiteavulnKEV agrega CVE-2026-21962 — Oracle / HTTP Server and Oracle Weblogic Server Proxy Plug-invulnKEV agrega CVE-2026-73570 — Synacor / Zimbra Collaboration Suite (ZCS)vulnKEV agrega CVE-2026-72530 — TrueConf / ServervulnKEV agrega CVE-2026-72529 — TrueConf / ServervulnKEV agrega CVE-2023-49105 — ownCloud / ownCloudvulnKEV agrega CVE-2026-53362 — Linux / KernelvulnKEV agrega CVE-2026-66384 — JFrog / ArtifactoryvulnKEV agrega CVE-2021-23758 — Ajax.NET Professional / Ajax.NET ProfessionalvulnKEV agrega CVE-2015-3246 — Red Hat / LibuservulnKEV agrega CVE-2015-5287 — Red Hat / Automatic Bug Reporting ToolvulnKEV agrega CVE-2022-0995 — Linux / KernelvulnKEV agrega CVE-2026-8452 — Citrix / NetScaler ADC and NetScaler GatewayvulnKEV agrega CVE-2019-1068 — Microsoft / SQL ServervulnKEV agrega CVE-2026-60004 — Gitea / GiteavulnKEV agrega CVE-2026-21962 — Oracle / HTTP Server and Oracle Weblogic Server Proxy Plug-invulnKEV agrega CVE-2026-73570 — Synacor / Zimbra Collaboration Suite (ZCS)vulnKEV agrega CVE-2026-72530 — TrueConf / ServervulnKEV agrega CVE-2026-72529 — TrueConf / Server
← All CVEs
CVE Watch—

CVE-2022-26904

Microsoft Windows User Profile Service Privilege Escalation Vulnerability

CVSS

—

No CVSS

EPSS

9.8%

p95

KEV

YES

Apr 25, 2022

Exploit Today

79

0-100

Published: — · Last modified: —

EPSS · 30d
9.8%EPSS · 30 days9.8%
2026-08-032026-08-31
KEV catalog record

Product

Microsoft / Windows

Vulnerability

Microsoft Windows User Profile Service Privilege Escalation Vulnerability

Added to KEV

Apr 25, 2022

Remediate by

May 16, 2022

Known ransomware use

No

Summary description

Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2022-26904

Related CVEs
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-322024.3 MED
99.2%
KEV—80Microsoft Windows Protection Mechanism Failure Vulnerability18dCVE-2026-208055.5 MED
91.8%
KEV—78Microsoft Windows Information Disclosure Vulnerability32dCVE-2025-266337.0 HIG
98.1%
KEV—79Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability27dCVE-2024-490398.8 HIG
96.3%
KEV—79Microsoft Windows Task Scheduler Privilege Escalation Vulnerability28dCVE-2024-434618.8 HIG
98.9%
KEV—80Microsoft Windows MSHTML Platform Spoofing Vulnerability22dCVE-2024-382175.4 MED
95.3%
KEV—79Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability22d