NVD disclosure day

Published threat advisories for April 15, 2022

CVE advisoryKnown Exploit

CVE-2022-26904

Microsoft Windows User Profile Service Privilege Escalation Vulnerability

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A vulnerability in the Windows User Profile Service could allow an attacker with local access to escalate privileges on affected systems. This presents a risk of unauthorized system control and further compromise of organizational data and operations. Addressing this vulnerability is recommended to mitigate business ri

NVD published: • CISA KEV
CVE advisoryKnown Exploit

CVE-2022-24521

Windows Common Log File System Driver Privilege Escalation

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A vulnerability in the Windows Common Log File System Driver allows an attacker with local access to escalate privileges. This impacts various Windows systems, potentially leading to unauthorized access and control, affecting data integrity and availability.

NVD published: • CISA KEV