PULSE
FEED
ransomvexy ransomware reclama a ZipAI · VN · Technologyransomsilentransomgroup reclama a Smith, Gambrell & Russell, LLP · US · Professional Servicesransomsilentransomgroup reclama a W... R...ransomqilin reclama a Insurance Audit Services · US · Financial Servicesransomn0n reclama a Company #137 · CAransomn0n reclama a Company #136 · DKransomn0n reclama a Company #135 · IDransomn0n reclama a Company #134 · USransomn0n reclama a Company #133 · USransomredact reclama a Omni Hotels & Resorts · US · Hospitalityransomakira reclama a Westboro Partnersransomakira reclama a System Plus · Technologyransomakira reclama a David L Wade & Associates · Professional Servicesransomakira reclama a Source Energy Services · CA · Energy & Utilitiesransomvexy ransomware reclama a ZipAI · VN · Technologyransomsilentransomgroup reclama a Smith, Gambrell & Russell, LLP · US · Professional Servicesransomsilentransomgroup reclama a W... R...ransomqilin reclama a Insurance Audit Services · US · Financial Servicesransomn0n reclama a Company #137 · CAransomn0n reclama a Company #136 · DKransomn0n reclama a Company #135 · IDransomn0n reclama a Company #134 · USransomn0n reclama a Company #133 · USransomredact reclama a Omni Hotels & Resorts · US · Hospitalityransomakira reclama a Westboro Partnersransomakira reclama a System Plus · Technologyransomakira reclama a David L Wade & Associates · Professional Servicesransomakira reclama a Source Energy Services · CA · Energy & Utilities
← Todos os CVEs
CVE Watch—

CVE-2022-26904

Microsoft Windows User Profile Service Privilege Escalation Vulnerability

CVSS

—

Sem CVSS

EPSS

16.9%

p97

KEV

SIM

25 de abr. de 2022

Exploit Today

79

0-100

Publicado: — · Última mod.: —

EPSS · 30d
16.9%EPSS · 30 dias16.9%
2026-10-082026-11-05
Ficha do catálogo KEV

Produto

Microsoft / Windows

Vulnerabilidade

Microsoft Windows User Profile Service Privilege Escalation Vulnerability

Adicionado ao KEV

25 de abr. de 2022

Corrigir até

16 de mai. de 2022

Uso conhecido em ransomware

Não

Descrição resumida

Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2022-26904

CVEs relacionados
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-969518.8 ALT
95.6%
KEV—79Microsoft Windows Command Injection Vulnerability7d
CVE-2026-858807.8 ALT
33.0%
KEV—60Microsoft Windows Heap-Based Buffer Overflow Vulnerability42d
CVE-2026-819637.8 ALT
33.7%
KEV—60Microsoft Windows Link Following Vulnerability58d
CVE-2026-322024.3 MÉD
99.4%
KEV—80Microsoft Windows Protection Mechanism Failure Vulnerability10d
CVE-2026-208055.5 MÉD
94.5%
KEV—78Microsoft Windows Information Disclosure Vulnerability98d
CVE-2025-622217.8 ALT
84.8%
KEV—75Microsoft Windows Use After Free Vulnerability41d