CVE-2022-26904

Summary dbcve.org

CVE-2022-26904 is an elevation of privilege vulnerability in the Windows User Profile Service that allows an authenticated attacker to gain higher privileges on the affected system. The vulnerability stems from improper handling of user profile operations, potentially enabling a local attacker to escalate privileges beyond their assigned user context.

Mitigation

Apply the Microsoft security update for CVE-2022-26904, which patches the Windows User Profile Service vulnerability. Prioritize patching domain controllers and systems with privileged user access.