CVE-2026-62832: Windows User Profile Service Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.
Other sources
Windows User Profile Service Elevation of Privilege Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.5499Fixed in 10.0.20348.5440Patch KB5120229 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.28000.2704Patch KB5121000 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.9168Fixed in 10.0.26000.9106Patch KB5120994 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.33296Fixed in 10.0.26100.33222Patch KB5120228 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19044.7663Patch KB5120249 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22631.7517Patch KB5120240 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26200.9168Fixed in 10.0.26100.9106Patch KB5120994 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.9168Fixed in 10.0.26100.9106Patch KB5120994 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19045.7663Patch KB5120249
Event History
Frequently Asked Questions
What is the severity of CVE-2026-62832?
CVE-2026-62832 has a severity rating of high, with a score of 7.8.
What systems are affected by CVE-2026-62832?
CVE-2026-62832 affects Microsoft Windows 10, Windows 11, Windows Server 2022, and Windows Server 2025.
How can CVE-2026-62832 be exploited?
CVE-2026-62832 can be exploited by an authorized attacker who can elevate privileges locally through improper link resolution.
How do I fix CVE-2026-62832?
To fix CVE-2026-62832, install the latest security updates provided by Microsoft for the affected Windows versions.
What impact does CVE-2026-62832 have on my system?
CVE-2026-62832 can lead to unauthorized privilege escalation, allowing attackers to gain higher access permissions on the system.