CVE-2022-26904 | SynScan

Vulnerability Database

289,571

Total vulnerabilities in the database

CVE-2022-26904

Windows User Profile Service Elevation of Privilege Vulnerability

Published: Apr 15, 2022
Updated: May 4, 2025
CVE: CVE-2022-26904
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.4
AV:L/AC:M/Au:N/C:P/I:P/A:P

CWEs:

CWE-362

Affected Software
References

Software	From	Fixed in
microsoft / windows_server_2008	r2-sp1	r2-sp1.x
microsoft / windows_server_2012	r2	r2.x
microsoft / windows_7	--sp1	--sp1.x
microsoft / windows_server_2008	-	-
microsoft / windows_10_1507	-	10.0.10240.19265
microsoft / windows_10_1607	-	10.0.14393.5066
microsoft / windows_10_21h1	-	10.0.19043.1645
microsoft / windows_10_20h2	-	10.0.19042.1645
microsoft / windows_10_1809	-	10.0.17763.2803
microsoft / windows_10_1909	-	10.0.18363.2212
microsoft / windows_server_20h2	-	10.0.19042.1645
microsoft / windows_11_21h2	-	10.0.22000.613
microsoft / windows_10_21h2	-	10.0.19044.1645
microsoft / windows_server_2016	-	10.0.14393.5066
microsoft / windows_server_2019	-	10.0.17763.2803
microsoft / windows_server_2022	-	10.0.20348.643