Description
An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Windows | 10 Version 1703 for 32-bit Systems, 10 Version 1703 for x64-based Systems, 10 Version 1803 for 32-bit Systems, 10 Version 1803 for x64-based Systems, 10 Version 1803 for ARM64-based Systems, 10 Version 1809 for 32-bit Systems, 10 Version 1809 for x64-based Systems, 10 Version 1809 for ARM64-based S… | — |
| Microsoft | Windows Server | version 1803 (Core Installation), 2019, 2019 (Core installation), 2016, 2016 (Core installation), 2008 for 32-bit Systems Service Pack 2, 2008 for 32-bit Systems Service Pack 2 (Core installation), 2008 for Itanium-Based Systems Service Pack 2, 2008 for x64-based Systems Service Pack 2, 2008 for x6… | — |
| Microsoft | Windows 10 Version 1903 for 32-bit Systems | unspecified | — |
| Microsoft | Windows 10 Version 1903 for x64-based Systems | unspecified | — |
| Microsoft | Windows 10 Version 1903 for ARM64-based Systems | unspecified | — |
| Microsoft | Windows Server, version 1903 (Server Core installation) | unspecified | — |
Advisories 1
- WID-SEC-2023-0884 Microsoft Windows: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 10, 2023