High severity7.8NVD Advisory· Published Aug 11, 2026· Updated Aug 11, 2026
CVE-2026-62832
CVE-2026-62832
Description
Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
4- August 2026 Patch Tuesday: Microsoft Fixes 421 CVEs, One Exploited Zero-DaySecurityWeek · Aug 11, 2026
- Microsoft's August 2026 Patch Tuesday Addresses 398 CVEs (CVE-2026-68820)Tenable Blog · Aug 11, 2026
- Microsoft Patch Tuesday August 2026, (Tue, Aug 11th)SANS Internet Storm Center · Aug 11, 2026
- Microsoft Patch Tuesday Update August 2026 – 394 Vulnerabilities Fixed, Including 3 Zero-DaysCyber Security News · Aug 11, 2026