CVE-2022-26904

Windows User Profile Service Elevation of Privilege Vulnerability

  • Published Apr 15, 2022
  • CVSS 7.0 high
  • 16.9% chance of exploitation in the next 30 days (EPSS)
  • In CISA's Known Exploited Vulnerabilities catalog
  • A Metasploit module exploits it
  • A fix is available

Affected software

CVE-2022-26904 at the National Vulnerability Database