VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Jan 24, 2020· Updated Jun 17, 2026

CVE-2019-1454

CVE-2019-1454

Description

An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'.

Affected products

7
  • Microsoft/Windows User Profile Servicellm-fuzzy
  • Microsoft/Windowsv5
    Range: 10 Version 1703 for 32-bit Systems
  • Microsoft/Windows 10 Version 1903 for 32-bit Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 1903 for ARM64-based Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 1903 for x64-based Systemsv5
    Range: unspecified
  • Microsoft/Windows Server 2003cpe-rescue
    Range: version 1803 (Core Installation)
  • Microsoft/Windows Server, version 1903 (Server Core installation)v5
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.