CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-08-12
Windows User Profile Service Elevation of Privilege Vulnerability (CVE-2021-34484) Analysis and Mitigation Guide
[Affected Scope] Windows 10, 11, and Windows Server systems running the User Profile Service (ProfSvc)
[Impact] A locally authenticated attacker can exploit a logical flaw to execute arbitrary code with SYSTEM privileges, leading to full system compromise
[Mitigation] Apply the official Microsoft cumulative security updates immediately, or restrict multi-user and RDP access if patching is delayed