CVE-2021-34484
Microsoft Windows User Profile Service Privilege Escalation Vulnerability
CVSS
7.8
Alta
EPSS
21.8%
p98
KEV
SIM
31 de mar. de 2022
Exploit Today
79
0-100
Publicado: 12 de ago. de 2021 · Última mod.: 10 de ago. de 2026
21.8%EPSS · 30 dias21.8%
2026-10-082026-11-05
Produto
Microsoft / Windows
Vulnerabilidade
Microsoft Windows User Profile Service Privilege Escalation Vulnerability
Adicionado ao KEV
31 de mar. de 2022
Corrigir até
21 de abr. de 2022
Uso conhecido em ransomware
Não
Descrição resumida
Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.
Ação necessária
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2021-34484
Windows User Profile Service Elevation of Privilege Vulnerability
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-969518.8 ALT95.6%
KEV—79Microsoft Windows Command Injection Vulnerability7dCVE-2026-858807.8 ALT33.0%
KEV—60Microsoft Windows Heap-Based Buffer Overflow Vulnerability42dCVE-2026-819637.8 ALT33.7%
KEV—60Microsoft Windows Link Following Vulnerability58dCVE-2026-322024.3 MÉD99.4%
KEV—80Microsoft Windows Protection Mechanism Failure Vulnerability10dCVE-2026-208055.5 MÉD94.5%
KEV—78Microsoft Windows Information Disclosure Vulnerability98dCVE-2025-622217.8 ALT84.8%
KEV—75Microsoft Windows Use After Free Vulnerability41d