medium5.5
CVE-2019-1454
An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows User Profile Service E…
Impact
An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 10 | All versions Versions 1607, 1703, 1709, 1803, 1809 |
| Microsoft | Windows 7 | All versions |
| Microsoft | Windows 8.1 | All versions |
| Microsoft | Windows Rt 8.1 | All versions |
| Microsoft | Windows Server 2008 | All versions Version r2 |
| Microsoft | Windows Server 2012 | All versions Version r2 |
| Microsoft | Windows Server 2016 | All versions Versions 1803, 1903 |
| Microsoft | Windows Server 2019 | All versions |