vulnerability
Microsoft Windows: CVE-2019-1454: Windows User Profile Service Elevation of Privilege Vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:L/AC:L/Au:N/C:N/I:P/A:P) | Nov 12, 2019 | Nov 12, 2019 | Sep 5, 2025 |
Severity
4
CVSS
(AV:L/AC:L/Au:N/C:N/I:P/A:P)
Published
Nov 12, 2019
Added
Nov 12, 2019
Modified
Sep 5, 2025
Description
An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'.
Solutions
microsoft-windows-windows_10-1507-kb4520011microsoft-windows-windows_10-1607-kb4519998microsoft-windows-windows_10-1703-kb4520010microsoft-windows-windows_10-1709-kb4520004microsoft-windows-windows_10-1803-kb4520008microsoft-windows-windows_10-1809-kb4519338microsoft-windows-windows_10-1903-kb4517389microsoft-windows-windows_server_2012-kb4519985microsoft-windows-windows_server_2012_r2-kb4519990microsoft-windows-windows_server_2016-1607-kb4519998microsoft-windows-windows_server_2019-1809-kb4519338msft-kb4517389-c417813c-d3db-4b44-83f8-60de59e73b91msft-kb4519985-8a3aec2b-e0d7-44a2-938d-c02f6b274548msft-kb4519985-f0d0e25e-cdb1-4823-b241-92ac2a81d3b3msft-kb4519990-a2d349fe-ee2a-4a85-be00-ee8cba079e9bmsft-kb4519990-b8b37d2d-5063-477b-809c-baf8ce11b723msft-kb4520003-0d1c5f85-509f-4142-baa9-c9a7d22386f8msft-kb4520003-4177c40d-e502-4e6c-9b95-6162fba1cec3msft-kb4520003-a99aef55-9e6d-4c41-8f5b-d84b383a4f3amsft-kb4520003-ba350f9c-c29f-4b6c-b51b-e3b7b3173be3msft-kb4520003-eb2b689a-dab5-479f-a051-dd4ee86b98efmsft-kb4520003-f6315128-ecc0-4bc5-a152-c9383a644a56msft-kb4520009-6f2b0614-8c8a-474c-b9d5-9f1ab035f1fbmsft-kb4520009-7c787b1f-05ba-4516-a24c-617da56d1405msft-kb4520009-e97e00d7-47d2-4016-a5c1-bbe896a46d6f
References
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.