CVE-2022-26904

A privilege escalation vulnerability in Windows User Profile Service was actively exploited in the wild, allowing attackers to escalate privileges without requiring remote code execution.

This vulnerability allows local attackers to escalate privileges, which is a significant concern for DIB organizations relying on Windows endpoints. While it does not enable remote code execution, its inclusion in CISA's KEV catalog indicates active exploitation, meaning attackers are leveraging it in real-world attacks. DIB orgs must ensure all Windows systems are patched immediately and monitor for signs of privilege escalation activity.

Shame score — The vulnerability was actively exploited in the wild and included in CISA's KEV catalog, indicating negligent patching and real-world impact despite Microsoft's eventual patch.