PULSEUnderground Intel

LIVE38signals / 24h

FEED

ransomn0n reclama a Company #75 · US · Not Foundransomn0n reclama a Company #74 · US · Not Foundransomn0n reclama a Evolution Spine / All Labs · Healthcareransomincransom reclama a fairfeelegalservices.com · US · Professional Servicesransomincransom reclama a verveba.com \ www.att.com · US · Technologyransomincransom reclama a www.coopecaja.fi.cr · CR · Financial Servicesransomincransom reclama a nowaszkola.com · PL · Educationransomqilin reclama a Keio Corporation · JP · Transportationransomqilin reclama a Kemlows Diecasting Products Limited · GB · Manufacturingransomqilin reclama a Telcoe Federal Credit Union · US · Financial Servicesransomwallstreet reclama a TGM Manufacturing, Inc · US · Manufacturingransomqilin reclama a Segres Systec · ES · Technologyransomqilin reclama a Shield Wall Systems of Florida · US · Government & Defenseransomqilin reclama a The Excalibur Group · US · Otherransomn0n reclama a Company #75 · US · Not Foundransomn0n reclama a Company #74 · US · Not Foundransomn0n reclama a Evolution Spine / All Labs · Healthcareransomincransom reclama a fairfeelegalservices.com · US · Professional Servicesransomincransom reclama a verveba.com \ www.att.com · US · Technologyransomincransom reclama a www.coopecaja.fi.cr · CR · Financial Servicesransomincransom reclama a nowaszkola.com · PL · Educationransomqilin reclama a Keio Corporation · JP · Transportationransomqilin reclama a Kemlows Diecasting Products Limited · GB · Manufacturingransomqilin reclama a Telcoe Federal Credit Union · US · Financial Servicesransomwallstreet reclama a TGM Manufacturing, Inc · US · Manufacturingransomqilin reclama a Segres Systec · ES · Technologyransomqilin reclama a Shield Wall Systems of Florida · US · Government & Defenseransomqilin reclama a The Excalibur Group · US · Other

CVE Watch—

CVE-2022-26904

Microsoft Windows User Profile Service Privilege Escalation Vulnerability

CVSS

—

No CVSS

EPSS

16.9%

p97

KEV

YES

Apr 25, 2022

Exploit Today

79

0-100

Published: — · Last modified: —

EPSS · 30d

9.6%EPSS · 30 days16.9%

2026-09-172026-10-15

KEV catalog record

Product

Microsoft / Windows

Vulnerability

Microsoft Windows User Profile Service Privilege Escalation Vulnerability

Added to KEV

Apr 25, 2022

Remediate by

May 16, 2022

Known ransomware use

No

Summary description

Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2022-26904

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-969518.8 HIG

KEV—72Microsoft Windows Command Injection Vulnerability8h CVE-2026-858807.8 HIG

KEV—77Microsoft Windows Heap-Based Buffer Overflow Vulnerability21d CVE-2026-819637.8 HIG

KEV—60Microsoft Windows Link Following Vulnerability37d CVE-2026-322024.3 MED

KEV—78Microsoft Windows Protection Mechanism Failure Vulnerability63d CVE-2026-208055.5 MED

KEV—78Microsoft Windows Information Disclosure Vulnerability77d CVE-2025-622217.8 HIG

KEV—75Microsoft Windows Use After Free Vulnerability20d